The Cybersecurity and Infrastructure Security Agency (CISA) has issued a warning following a security advisory released by VMware on August 2, 2022. VMSA-2022-0021 addresses multiple critical vulnerabilities affecting VMware’s Workspace ONE Access, Access Connector, Identity Manager, Identity Manager Connector, and vRealize Automation products. The identification was a result of an effort by multiple security researchers and companies. The most severe vulnerability, tracked as CVE-2022-31656, has a CVSS score of 9.8/10 and is described as a critical authentication bypass. If exploited, remote attackers could use this vulnerability to elevate their privileges to administrator, giving themselves full reign to create and deploy catastrophic exploit chains at will. While on their own less severe, three (3) other vulnerabilities were found able to be paired with CVE-2022-31656 to achieve unauthenticated remote code execution (RCE). Although there is no evidence to suggest that this vulnerability has been exploited in the wild, a proof-of-concept (PoC) and technical writeup will soon be published by VNG Security researcher Petrus Viet. Due to the reluctance of many customers to update their VMware products, VMware vulnerabilities remain very popular attack vectors despite timely patches provided by the company. CTIX analysts recommend that administrators responsible for the above products update to the latest version immediately. If the patch cannot be applied immediately, VMware has provided a temporary manual workaround that will prevent exploitation, and administrators should immediately apply this technique while planning for the best time to officially update their products and infrastructure. Technical details on the other vulnerabilities, as well as the workaround instructions, can be found linked in the below advisories.