VMware has released a security patch for eight (8) vulnerabilities, five (5) of which are labeled as critical. The vulnerabilities span across multiple products, and if exploited, could allow attackers to escalate their privileges to root and perform arbitrary remote code execution (RCE) against vulnerable instances. At this time, these flaws affect VMware Workspace ONE Access, VMware Identity Manager, VMware vRealize Automation, VMware Cloud Foundation, and vRealize Suite Lifecycle Manager. There is currently no evidence that these flaws have been exploited in-the-wild, however users of these virtualization platforms are still urged to download the patch as soon as possible. VMware understands that some of their customers may not be able to install the patch immediately, due to the effect it would have on current operations and business processes, and they have released a manual workaround helping those administrators to harden their defensive posture in the meantime. The workaround is a Python-based script, but depending on the environments it’s applied to, it may create follow-on problems that need to be mitigated. The specific information on these vulnerabilities is linked in the articles and advisory below. CTIX urges all administrators who cannot immediately patch their platforms begin constructing a plan to compartmentalize their operations so that the patch can systematically be applied to their entire infrastructure in as little time as possible.