MEIFP – Most Exploited Internet-Facing Products

VMware

Products: Cloud Foundation · Telco Cloud Infrastructure · Telco Cloud Platform · VMware Aria Operations · VMware Cloud Foundation Operations · vCenter · vSphere Foundation

66.6

Score

CVEs

Active

PoC

KEV

#50

Rank

Period:

Product:

CVE ID	Published	CVSS	Exploit	KEV	AC	PR	Auto	Score(hover)	Affected Products	Description
CVE-2026-59310	2026-07-30	9.8v3.1	ACTIVE		Low	None	YES	40.6	Cloud FoundationTelco Cloud InfrastructureTelco Cloud PlatformvCentervSphere Foundation	VMware vCenter contains a directory traversal vulnerability in the Syslog server. A malicious actor with network access to vCenter may exploit this issue to execute arbitrary code.
CVE-2026-22719	2026-02-25	8.1v3.1	ACTIVE		High	None	no	26.0	Telco Cloud InfrastructureTelco Cloud PlatformVMware Aria OperationsVMware Cloud Foundation Operations	VMware Aria Operations contains a command injection vulnerability. A malicious unauthenticated actor may exploit this issue to execute arbitrary commands which may lead to remote code execution in VMware Aria Operations while support-assisted product migration is in progress. To remediate CVE-2026

Each CVE: 10 pts base (Active only), boosted by:

KEV×2.0AC: Low×1.2PR: None×1.3PR: Low×1.1Auto×1.3