CVE-2026-22715
Medium · 5.9CVSS
5.9
EPSS
0.2%
Published
Feb 26, 2026
CISA due date
—
The record
VMWare Workstation and Fusion contain a logic flaw in the management of network packets. Known attack vectors: A malicious actor with administrative privileges on a Guest VM may be able to interrupt or intercept network connections of other Guest VM's. Resolution: To remediate CVE-2026-22715 please upgrade to VMware Workstation or Fusion Version 25H2U1
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-81871 OpenTelemetry-Go is the Go implementation of OpenTelemetry. CWE-923
- CVE-2026-57028 An Improper Restriction of Communication Channel to Intended Endpoints vulnerability in… CWE-923
- CVE-2026-33803 An Improper Restriction of Communication Channel to Intended Endpoints vulnerability in… CWE-923
- CVE-2026-55655 A flaw was found in OpenSSH. CWE-923
- CVE-2026-12539 Docker Sandboxes (sbx) blocks ICMP egress with an authorizer applied only at… CWE-923
- CVE-2026-12039 Docker Sandboxes (sbx) enforces an HTTP/S-only egress allowlist but does not apply it to… CWE-923
- CVE-2025-36145 IBM watsonx.data 2.2 through 2.3.1 IBM Lakehouse does not properly restrict inbound and… CWE-923
- CVE-2026-22726 Route Services can be leveraged to send app traffic to network destinations outside of an… CWE-923