Is CVE-2026-22715 actively exploited?

No active exploitation of CVE-2026-22715 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2026-22715 be exploited remotely?

Partially. CVE-2026-22715 requires adjacent network access (same network segment) to exploit.

What is the CVSS score of CVE-2026-22715?

CVE-2026-22715 has a CVSS score of 5.9 (MEDIUM).

HOME VULNERABILITIESCVE-2026-22715

MEDIUM

CVE-2026-22715

Published: February 26, 2026· Updated: Feb 27, 2026

5.9

CVSS v3.1

EPSS:0.02%probability of exploitation in 30 daysPercentile:6.3th

Official Description

VMWare Workstation and Fusion contain a logic flaw in the management of network packets.

Known attack vectors: A malicious actor with administrative privileges on a Guest VM may be able to interrupt or intercept network connections of other Guest VM's.

Resolution: To remediate CVE-2026-22715 please upgrade to VMware Workstation or Fusion Version 25H2U1

NVD Source

Technical Analysis

CVE-2026-22715 requires adjacent network access, limiting remote exploitation but still posing risk in shared or local network environments.

The vulnerability requires no privileges and no user interaction, making it a prime target for automated exploitation campaigns and worm-like propagation.

A successful exploit results in full integrity compromise (data manipulation), with a CVSS base score of 5.9.