vCenter

Mentions · 7d2
Mentions · 30d3
All mentions6
First seenAug 17, 2026
Last mentioned1d ago

Timeline

6 articles · newest first

CISA adds VMware ESX and Linux kernel flaws to KEV

Agencies must fix CVE-2026-41709 by November 11, 2026, and Fragnesia CVE-2026-46300 by October 31, 2026.

Security Affairsupdated Oct 29, 16:25 UTC · 1d agofirst Oct 29, 16:05 UTC · 1d agoExploit / PoCExploited9 sourcesCVE-2026-41709 CVE-2026-463001

Canada updates VMware advisory after two CVEs enter CISA KEV

CVE-2026-41709 joined the KEV catalog on October 28; CVE-2026-59310 was added on August 18.

Canadian Centre for Cyber Securityupdated Oct 29, 16:25 UTC · 1d agofirst Oct 28, 19:53 UTC · 2d agoExploit / PoCExploited9 sourcesCVE-2026-59309 CVE-2026-59310 CVE-2026-47876+23

Ransomware groups exploit GlobalProtect MFA bypass CVE-2026-0257

Unit 42 says attackers forged authentication-override cookies, then pulled domain credentials from a VMware virtual disk offline.

Cyber Security NewsOct 20, 10:03 UTC · 10d agoExploit / PoCExploitedCVE-2026-0257 CVE-2023-27532

ThreatsDay: Self-Rewriting Agents, 800+ Flaws Patched, Insider SIM Swaps and 22 More New Stories

Unit 42 exposed CL-CRI-1171, a pay-per-install operation spreading OfferLoader and Insomnia RAT via YouTube and SEO poisoning to corporate and government targets.

The Hacker NewsSep 17, 17:32 UTC · Sep 17, 2026Threat actorExploitedCVE-2026-593101

Aurora Ransomware Operators Use Cursor AI in Attacks Against 10 Targets

Aurora ransomware operators used Cursor AI running Claude Sonnet to plan and execute intrusions against dozens of organizations in nine countries.

The Hacker NewsAug 31, 11:47 UTC · Aug 31, 2026RansomwareExploited15 · 3 reads

⚡ Weekly Recap: VMware Exploits, Windows 0-Day, MCP Attacks, Browser Hijacks and More

Weekly recap: suspected China-nexus APT exploited VMware vCenter CVE-2026-59310, Lazarus used Windows zero-day CVE-2026-68820, and macOS flaw dropped Monero miners.

The Hacker NewsAug 17, 17:57 UTC · Aug 17, 2026Exploit / PoCExploitedCVE-2026-59310 CVE-2026-65400 CVE-2026-688203

Related CVEs

by mentions

CVE-2026-593103%9.8
Unauthenticated Path Traversal RCE in Broadcom VMware vCenter Server Syslog
published Jul 30, 2026Broadcom (VMware) vCenter ServerKEVRansomwarePoC ×2
CVE-2026-41709<1%2.7
Insufficient logging in VMware ESX for admin operations
published Jul 30, 2026Broadcom VMware ESXKEV
CVE-2026-654002%9.8
Authentication Bypass in Apple macOS Screen Sharing
published Aug 6, 2026Apple macOS (Screen Sharing service)KEV
CVE-2026-4630016%7.8
Shared-frag marker loss in Linux kernel skb coalescing (LPE)
published May 23, 2026linux kernelKEVPoC
CVE-2026-025795%7.8
Authentication Bypass in Palo Alto Networks PAN-OS GlobalProtect Portal and Gateway
published May 13, 2026Palo Alto Networks PAN-OS (GlobalProtect portal and gateway)KEVRansomware
CVE-2023-2753281%7.5
Missing Authentication in Veeam Backup & Replication Exposes Stored Credentials
published Mar 10, 2023Veeam Backup & ReplicationKEVRansomware
CVE-2026-68820<1%7.0
Use-After-Free Local Privilege Escalation in Microsoft Windows WinSock AFD Driver
published Aug 11, 2026Microsoft Windows Ancillary Function Driver for WinSock (afd.sys)KEV
CVE-2026-593098%9.8
VMware vCenter contains an authentication bypass vulnerability in the VMware Directory Service
published Jul 30, 2026vmware vcenter server
CVE-2026-47876<1%9.3
VMware ESX contains an out-of-bounds write vulnerability in the VMXNET3 virtual network adapter
published Jul 30, 2026
CVE-2026-41703<1%7.6
VMware ESX, Workstation, and Fusion contain an out-of-bounds read vulnerability
published Jul 30, 2026

Appears with

VMwarevendor · 4
Palo Alto Networksvendor · 2
Workstationproduct · 2
QUIRSOorganization · 2
CISAorganization · 2
Fusionproduct · 2
VMware ESXiproduct · 2
GlobalProtectproduct · 1
Insomnia RATmalware · 1
Warp Pandathreat actor · 1
ESXproduct · 1
GeoServervendor · 1
Teckentrupvictim · 1
Claude Sonnetproduct · 1
Claude Sonnetai model · 1
Screen Sharingproduct · 1

Entities are extracted by the model from each article. First seen Aug 17, 2026, last mentioned 1d ago. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.