MEIFP – Most Exploited Internet-Facing Products

VMware

Products: Telco Cloud Infrastructure · Telco Cloud Platform · VMware Aria Operations · VMware Cloud Foundation (VMware vCenter Server) · VMware Cloud Foundation Operations · VMware vCenter Server

57.2

Score

CVEs

Active

PoC

KEV

#49

Rank

Period:

Product:

CVE ID	Published	CVSS	Exploit	KEV	AC	PR	Auto	Score(hover)	Affected Products	Description
CVE-2026-22719	2026-02-25	8.1v3.1	ACTIVE		High	None	no	26.0	Telco Cloud InfrastructureTelco Cloud PlatformVMware Aria OperationsVMware Cloud Foundation Operations	VMware Aria Operations contains a command injection vulnerability. A malicious unauthenticated actor may exploit this issue to execute arbitrary commands which may lead to remote code execution in VMware Aria Operations while support-assisted product migration is in progress. To remediate CVE-2026
CVE-2023-34048	2023-10-25	9.8v3.1	ACTIVE		Low	None	no	31.2	VMware Cloud Foundation (VMware vCenter Server)VMware vCenter Server	vCenter Server contains an out-of-bounds write vulnerability in the implementation of the DCERPC protocol. A malicious actor with network access to vCenter Server may trigger an out-of-bounds write potentially leading to remote code execution.

Each CVE: 10 pts base (Active only), boosted by:

KEV×2.0AC: Low×1.2PR: None×1.3PR: Low×1.1Auto×1.3