CVE-2026-22720 — VMware Aria Operations contains a stored cross-site scripting vulnerability. A malicious actor with privileges to create custom benchmarks may be able to inject script to perform administrative action — CVE Database · The Intelligence Room