CISA adds VMware Aria Operations command injection flaw CVE-2026-22719 to KEV after reports of active exploitation; patches released by Broadcom.

CVE-2026-22719, a recently patched vulnerability in VMware Aria Operations, has been exploited in the wild, CISA warned.

Broadcom has released patches for several vulnerabilities affecting VMware Aria Operations, including high-severity flaws.

VMware appears to have secured an early procedural win in the case it brought against German industrial giant Siemens over its alleged use of unlicensed software. The case commenced in March 2025, ...