August 10, 2026

CVE Watchtower


← Back to CVE List

CVE-2026-41723NVD

Vulnerability Summary

VMware Cloud Foundation Operations contains multiple stored cross-site scripting vulnerabilities.A malicious actor with privileges to create policies, views or text-widgets may be able to inject scripts to perform administrative actions in VMware Cloud Foundation Operations.
Severity Level
HIGH(8.0)
Published Date
Jun 8, 2026
Last Modified
Jul 23, 2026
Exploitation Status
No confirmed exploitation yet
EPSS Score (30-Day)
0.40%Probability
Root Weakness (CWE)
CWE-79: Cross-site Scripting (XSS) ↗
The software does not neutralize user-controllable input before it is placed in output that is used as a web page.
CVSS v3.1 Base Metrics
Attack VectorNetwork
Attack ComplexityLow
Privileges RequiredLow
User InteractionRequired
ScopeUnchanged
ConfidentialityHigh
IntegrityHigh
AvailabilityHigh

External References