High8.0VMware (Broadcom)

VMware Cloud Foundation: VMware Cloud Foundation Operations contains multiple stored cross-site scripting vulnerabilities.A malicious actor wi…

CVE-2026-41724 Published Jun 8, 2026Updated by vendor Jun 17, 2026

CVE-2026-41724

Affected products & platforms

VMware (Broadcom)Cloud Foundation

Summary

VMware Cloud Foundation Operations contains multiple stored cross-site scripting vulnerabilities.A malicious actor with privileges to create policies, views or text-widgets may be able to inject scripts to perform administrative actions in VMware Cloud Foundation Operations.

Mitigation

Mitigation steps weren't captured by the parser for this advisory — this is a parsing gap, not a statement that no fix exists. Read the vendor advisory below for the authoritative guidance.

Official advisory · medium-confidence parse· fetched 6 hours ago·verify at source

Source evidence

What VulniPulse actually used to build this record — and why.

VMware Security Advisories (VMSA) via NVDofficial
Official vendor feed — the source of truth for this advisory. VulniPulse polled this feed and parsed this entry from it.
VMware (Broadcom)

Cross-references

Validate CVE metadata against the authoritative registries.

CVE-2026-41724NVD CVE.org MITRE

Official resources

Broadcom support downloads (ESXi / vCenter patches)
Official documentation
Official upgrade documentation for vSphere (ESXi / vCenter).
VMware product lifecycle (EOL / support dates)
Release notes
Confirm your release train is still supported before planning the upgrade path.
Broadcom / VMware Security Advisories (VMSA)
Official documentation
Canonical VMSA portal — full advisory text, response matrix and fixed-version tables.
VMware docs on Broadcom TechDocs
Official documentation
Official VMware product documentation, including upgrade and patching guides.

Discussion(0)

No comments yet. Share field notes, upgrade gotchas, or questions — verify against the vendor advisory before acting on community advice.