VMware Telco Cloud Platform
17 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-41709 | 5.1.x ; 5.0.x | ESX insufficient logging vulnerability | LOW 2.7 | 0.3 % | KEV | |
| CVE-2026-41703 | | Out-of-bounds read vulnerability | HIGH 7.6 | 0.4 % | ||
| CVE-2026-47876 | 5.1.x ; 5.0.x | VMXNET3 out-of-bounds write vulnerability | CRITICAL 9.3 | 0.2 % | ||
| CVE-2026-59309 | 5.1.x ; 5.0.x ; 4.x ; … | vCenter authentication-bypass vulnerability | CRITICAL 9.8 | 0.6 % | ||
| CVE-2026-59310 | 5.1.x ; 5.0.x ; 4.x ; … | vCenter directory-traversal vulnerability | CRITICAL 9.8 | 2.6 % | KEV | |
| CVE-2026-22719 | 2.0 – < 5.2.3 | VMware Aria Operations command injection vulnerability | HIGH 8.1 | 18 % | KEV | |
| CVE-2025-41250 | 5.x, 4.x, 3.x, 2.x | Header injection vulnerability | HIGH 8.5 | 0.7 % | ||
| CVE-2025-41241 | 5.x, 2.x | Denial-of-service vulnerability | MEDIUM 4.4 | 0.3 % | ||
| CVE-2025-41239 | 5.x, 4.x, 3.x, 2.x | vSockets information-disclosure vulnerability | HIGH 7.1 | 3.2 % | ||
| CVE-2025-41238 | 5.x, 4.x, 3.x, 2.x | PVSCSI heap-overflow vulnerability | CRITICAL 9.3 | 0.5 % | ||
| CVE-2025-41237 | | VMCI integer-underflow vulnerability | CRITICAL 9.3 | 0.5 % | ||
| CVE-2025-41236 | 5.x, 4.x, 3.x, 2.x | VMXNET3 integer-overflow vulnerability | CRITICAL 9.3 | 2.6 % | ||
| CVE-2025-41228 | 5.x, 4.x, 3.x, 2.x | VMware ESXi and vCenter Server Reflected Cross Site Scripting (XSS) Vulnerability | MEDIUM 4.3 | 0.9 % | ||
| CVE-2025-41227 | 5.x, 4.x, 3.x, 2.x | Denial-of-Service Vulnerability | MEDIUM 5.5 | 0.2 % | ||
| CVE-2025-41226 | 5.x, 4.x, 3.x, 2.x | Guest Operations Denial-of-Service Vulnerability | MEDIUM 6.8 | 0.2 % | ||
| CVE-2025-41225 | 5.x, 4.x, 3.x, 2.x | VMware vCenter Server authenticated command-execution vulnerability | HIGH 8.8 | 0.3 % | ||
| CVE-2025-22224 | 5.x, 4.x, 3.x, 2.x | VMware ESXi, and Workstation contain a TOCTOU (Time-of-Check Time-of-Use) vulnerability that leads to an out-of-bounds write. A malicious ac | CRITICAL 9.3 | 1.6 % | KEV |