CISA Warns of VMware Aria Operations Vulnerability Actively Exploited in Attacks

CISA added CVE-2026-22719 — a command injection vulnerability in Broadcom's VMware Aria Operations that enables unauthenticated remote code execution during support-assisted migrations — to its Known Exploited Vulnerabilities catalog, noting active exploitation in the wild and mandating federal agencies remediate by March 24, 2026; organizations are urged to apply vendor mitigations or discontinue use to prevent compromise.