Impact of CVE-2026-27739 on VMware Tanzu Operations Manager

Products

• Operations Manager

Issue/Introduction

Broadcom has investigated the impact of CVE-2026-27739 on VMware Tanzu Operations Manager. This vulnerability is related to Server-Side Request Forgery (SSRF) within the Angular Server-Side Rendering (SSR) package.

Assessment

The Tanzu R&D team has audited the codebase and dependencies of Operations Manager and determined that the product is not affected.

Environment

Tanzu Operations Manager

Resolution

No action is required. Since the vulnerable code is not present in the Tanzu Operations Manager appliance, no security patches or workarounds are necessary for this specific CVE.