Insights from the Field

Introduction On March 4, 2025, Broadcom issued VMSA-2025-0004, disclosing actively exploited vulnerabilities in VMware ESXi, Workstation, and Fusion. CVE-2025-22224, CVE-2025-22225, and CVE-2025-22226 allow attackers to escape virtual machines, execute arbitrary code on the host, and exfiltrate sensitive data. These threats pose a critical risk to cloud and enterprise environments where VMware hypervisors are foundational. Organizations must act immediately to patch affected

Recently, VMware issued VMSA-2025-0001, addressing a Server-Side Request Forgery (SSRF) vulnerability, CVE-2025-22215, in VMware Aria Automation and Cloud Foundation. For anyone managing virtualized or hybrid environments, this raises important questions about how vulnerabilities like SSRF could be leveraged to enable broader attacks. Let’s unpack what this means and why it matters. What is SSRF and Why Should You Care? SSRF (Server-Side Request Forgery) is a vulnerability th