MEIFP – Most Exploited Internet-Facing Products

VMware

Products: Cloud Foundation · Telco Cloud Infrastructure · Telco Cloud Platform · VMware Aria Operations · VMware Cloud Foundation (VMware vCenter Server) · VMware Cloud Foundation Operations · VMware vCenter Server · vCenter · vSphere Foundation

97.8

Score

CVEs

Active

PoC

KEV

#26

Rank

Period:

Product:

CVE ID	Published	CVSS	Exploit	AC	PR	Auto	Score(hover)	Affected Products	Description
CVE-2026-59310	2026-07-30	9.8v3.1	ACTIVE	Low	None	YES	40.6	Cloud FoundationTelco Cloud InfrastructureTelco Cloud PlatformvCentervSphere Foundation	VMware vCenter contains a directory traversal vulnerability in the Syslog server. A malicious actor with network access to vCenter may exploit this issue to execute arbitrary code.
CVE-2026-22719	2026-02-25	8.1v3.1	ACTIVE	High	None	no	26.0	Telco Cloud InfrastructureTelco Cloud PlatformVMware Aria OperationsVMware Cloud Foundation Operations	VMware Aria Operations contains a command injection vulnerability. A malicious unauthenticated actor may exploit this issue to execute arbitrary commands which may lead to remote code execution in VMware Aria Operations while support-assisted product migration is in progress. To remediate CVE-2026
CVE-2023-34048	2023-10-25	9.8v3.1	ACTIVE	Low	None	no	31.2	VMware Cloud Foundation (VMware vCenter Server)VMware vCenter Server	vCenter Server contains an out-of-bounds write vulnerability in the implementation of the DCERPC protocol. A malicious actor with network access to vCenter Server may trigger an out-of-bounds write potentially leading to remote code execution.

Each CVE: 10 pts base (Active only), boosted by:

KEV×2.0AC: Low×1.2PR: None×1.3PR: Low×1.1Auto×1.3