Provenance Record

Well-structured cybersecurity News article at 688 words. Thorough coverage of the vulnerability, affected products, workarounds, and disclosure credits. Good Analysis section providing context on VMware as a target. Appropriate 'What We Don't Know' section.

4 sources: The Hacker News (authoritative cybersecurity news, on allowlist), Broadcom official security advisory (primary vendor source), Vulert (vulnerability analysis blog), SecurityWeek (403 bot-blocked but established infosec outlet). Broadcom advisory is the definitive primary source.

All key claims verified against source snapshots: CVE-2026-22719 CVSS 8.1 command injection (The Hacker News), unauthenticated exploitation during support-assisted migration (Broadcom advisory), VMSA-2026-0001 advisory designation (Broadcom), CVE-2026-22720 stored XSS and CVE-2026-22721 privilege escalation (Broadcom), March 24 FCEB deadline (The Hacker News), affected versions 8.x up to 8.18.5 and 9.x up to 9.0.1 (Vulert), workaround script aria-ops-rce-workaround.sh (The Hacker News), Tobias Anders of Deutsche Telekom Security credited for CVE-2026-22720 and Sven Nobis/Lorin Lehawany of ERNW for CVE-2026-22721 (Broadcom advisory). Broadcom quote about awareness of exploitation reports confirmed verbatim.

Excellent cybersecurity News article with strong primary sourcing from the Broadcom vendor advisory. All claims verified. Comprehensive coverage of the vulnerability, affected products, remediation options, and disclosure credits. Ready for publication.