⚡ Exploit-DB.ai CRITICAL
CRITICAL

CVE-2022-22954

Published: March 18, 2026 · Source: National Vulnerability Database (NVD)

⚡ AI Threat Assessment

VMware Workspace ONE SSTI enabling unauthenticated RCE. Patch immediately — exploited by Iranian APT actors within days of disclosure. If unpatched, audit all admin accounts and system configuration changes.

📋 Official Description

VMware Workspace ONE Access and Identity Manager contain a server-side template injection vulnerability because of the way Freemarker templates are processed.

Get Real-Time CVE Alerts

Supernova subscribers receive AI-triaged CVE alerts the moment they're published — before the PoC drops.

Start Supernova — $99/mo →