CVE-2026-22719: VMware Aria Operations Command Injection Added to CISA KEV

**CVE-2026-22719 — VMware Aria Operations command injection:** CISA added this unauthenticated RCE vulnerability to its Known Exploited Vulnerabilities catalog; affected Aria Operations versions include 8.x ≤ 8.18.5 and 9.x ≤ 9.0.1, Broadcom has released fixes (8.18.6, 9.0.2) and provides a workaround script (aria-ops-rce-workaround.sh); organizations should prioritize patching or apply the workaround and restrict management access, especially during support-assisted migrations, with CISA’s remediation deadline of March 24, 2026.