CISA flags VMware Aria Operations RCE flaw as exploited in attacks
2026-03-04T20:08:02Z•a10d58ad74246d61fcc4e334817f0829048d565e3885114f063f04ca2bab396a
CVE-2026-22719AI-enabled attacksAWS outageAkzoNobelAndroidCISA KEVCyberStrikeAIFacebook outageLexisNexisMFA theftOAuth abusePWAQualcommStar CitizenUniversity of Hawaii Cancer CenterVMware Aria Operationscompromised cPaneldata breachdrone strikeexploited vulnerabilitymalware distributionphishingransomwareremote code executionzero-day
What happened
This feed compiles multiple security incidents and advisories: CISA added a VMware Aria Operations remote code execution vulnerability (CVE-2026-22719) to its Known Exploited Vulnerabilities catalog, flagging it as actively exploited. Google released Android updates addressing 129 flaws including an actively exploited Qualcomm display zero-day. Several data breaches and ransomware incidents were reported (AkzoNobel U.S. site, LexisNexis, University of Hawaii Cancer Center, Cloud Imperium Games/Star Citizen), plus commoditization of compromised site management panels in cybercrime markets. AWS/
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- bleepingcomputer
- Record identifier
- a10d58ad74246d61fcc4e334817f0829048d565e3885114f063f04ca2bab396a
- Enrichment time
- 2026-03-04T20:08:02Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.