VMware Telco Cloud Infrastructure
14 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-59309 | 3.0 | vCenter authentication-bypass vulnerability | CRITICAL 9.8 | 0.6 % | ||
| CVE-2026-59310 | 3.0 | vCenter directory-traversal vulnerability | CRITICAL 9.8 | 2.6 % | KEV | |
| CVE-2026-22719 | 2.0 – < 5.2.3 | VMware Aria Operations command injection vulnerability | HIGH 8.1 | 18 % | KEV | |
| CVE-2025-41250 | 3.x, 2.x | Header injection vulnerability | HIGH 8.5 | 0.7 % | ||
| CVE-2025-41241 | 2.x | Denial-of-service vulnerability | MEDIUM 4.4 | 0.3 % | ||
| CVE-2025-41239 | | vSockets information-disclosure vulnerability | HIGH 7.1 | 3.2 % | ||
| CVE-2025-41238 | | PVSCSI heap-overflow vulnerability | CRITICAL 9.3 | 0.5 % | ||
| CVE-2025-41237 | | VMCI integer-underflow vulnerability | CRITICAL 9.3 | 0.5 % | ||
| CVE-2025-41236 | | VMXNET3 integer-overflow vulnerability | CRITICAL 9.3 | 2.6 % | ||
| CVE-2025-41228 | 3.x,2.x | VMware ESXi and vCenter Server Reflected Cross Site Scripting (XSS) Vulnerability | MEDIUM 4.3 | 0.9 % | ||
| CVE-2025-41227 | 3.x, 2.x | Denial-of-Service Vulnerability | MEDIUM 5.5 | 0.2 % | ||
| CVE-2025-41226 | 3.x, 2.x | Guest Operations Denial-of-Service Vulnerability | MEDIUM 6.8 | 0.2 % | ||
| CVE-2025-41225 | 3.x, 2.x | VMware vCenter Server authenticated command-execution vulnerability | HIGH 8.8 | 0.3 % | ||
| CVE-2025-22224 | 3.x, 2.x | VMware ESXi, and Workstation contain a TOCTOU (Time-of-Check Time-of-Use) vulnerability that leads to an out-of-bounds write. A malicious ac | CRITICAL 9.3 | 1.6 % | KEV |