SharpStorm

Mentions · 7d3
Mentions · 30d3
All mentions3
First seenOct 29, 2026
Last mentioned1d ago

Timeline

3 articles · newest first

Warp Panda used VMware ESX zero-day; firewalls rooted and crashed

CISA set November 11 and October 31 federal deadlines; Cisco says CVE-2026-76418 is crashing firewalls with no workaround.

Help Net SecurityOct 29, 16:25 UTC · 1d agoExploit / PoCExploited9 sourcesCVE-2026-41709 CVE-2026-46300 CVE-2026-109618+23 · 2 reads

Warp Panda used low-severity ESXi flaw CVE-2026-41709 as a zero-day

CISA added the logging bug to KEV and gave US federal agencies two weeks to install the patched ESXi builds.

SecurityWeekupdated Oct 29, 16:25 UTC · 1d agofirst Oct 29, 08:01 UTC · 1d agoExploit / PoCExploited9 sourcesCVE-2026-41709 CVE-2026-59309 CVE-2026-593101

CISA lists VMware ESX logging flaw exploited by Warp Panda

CVE-2026-41709 lets an admin skip some logs; federal agencies must patch by November 11, 2026.

The Hacker Newsupdated Oct 29, 16:25 UTC · 1d agofirst Oct 29, 06:22 UTC · 1d agoExploit / PoCExploited9 sourcesCVE-2026-417092

Related CVEs

by mentions

CVE-2026-41709<1%2.7
Insufficient logging in VMware ESX for admin operations
published Jul 30, 2026Broadcom VMware ESXKEV
CVE-2026-593103%9.8
Unauthenticated Path Traversal RCE in Broadcom VMware vCenter Server Syslog
published Jul 30, 2026Broadcom (VMware) vCenter ServerKEVRansomwarePoC ×2
CVE-2026-109618100%9.2
OOM longjmp memory flaw enabling RCE in PHP
published 9d agophpKEVPoC ×25
CVE-2026-109619100%9.2
Use-after-free RCE in PHP via stale request globals
published 9d agophpKEVPoC ×15
CVE-2026-76418<1%8.6
Unauthenticated DoS in Cisco ASA and FTD SSL VPN with secondary auth
published 2d agoCisco Secure Firewall Adaptive Security Appliance (ASA) SoftwareKEV
CVE-2026-4630016%7.8
Shared-frag marker loss in Linux kernel skb coalescing (LPE)
published May 23, 2026linux kernelKEVPoC
CVE-2026-593098%9.8
VMware vCenter contains an authentication bypass vulnerability in the VMware Directory Service
published Jul 30, 2026vmware vcenter server

Appears with

Warp Pandathreat actor · 3
BrickStormmalware · 3
CrowdStrikeorganization · 3
Broadcomvendor · 3
CISAorganization · 3
VMware vCenterproduct · 2
VMware ESXproduct · 2
Clay Typhoonthreat actor · 1
DualGaugemalware · 1
VMware vSphere Foundationproduct · 1
Quirsoorganization · 1
TetanusStormmalware · 1
Armory Castlethreat actor · 1
VMware Workstationproduct · 1
VMware ESXiproduct · 1
VMware Cloud Foundationproduct · 1

Entities are extracted by the model from each article. First seen Oct 29, 2026, last mentioned 1d ago. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.