Description
VMware vCenter contains a denial-of-service vulnerability. A malicious actor who is authenticated through vCenter and has permission to perform API calls for guest OS customisation may trigger this vulnerability to create a denial-of-service condition.
Scores
CVSS v3
4.4
EPSS
0.0009
EPSS Percentile
25.9%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
partial
Details
CWE
CWE-754
Status
published
Products (5)
VMware/Cloud Foundation
5.x, 4.5.x
VMware/Telco Cloud Infrastructure
2.x
VMware/Telco Cloud Platform
5.x, 2.x
VMware/vCenter
7.0 - 7.0 U3v
VMware/vCenter
8.0 - 8.0 U3g
Published
Jul 29, 2025
Tracked Since
Feb 18, 2026