VMware Cloud Foundation

Mentions · 7d3
Mentions · 30d4
All mentions5
First seenAug 11, 2026
Last mentioned2d ago

Timeline

5 articles · newest first

CISA adds exploited VMware ESXi logging flaw CVE-2026-41709 to KEV

Federal remediation is due November 11, 2026; the CVSS 2.7 flaw only hides actions by someone who already has admin rights.

GBHackersupdated Oct 29, 16:25 UTC · 1d agofirst Oct 29, 08:30 UTC · 2d agoExploit / PoCExploited9 sourcesCVE-2026-417091

CISA lists exploited VMware ESX logging flaw CVE-2026-41709

An administrator can omit expected log records; Broadcom rates it CVSS 2.7 and federal remediation is due November 11.

Cyber Security Newsupdated Oct 29, 16:25 UTC · 1d agofirst Oct 29, 06:22 UTC · 2d agoExploit / PoCExploited9 sourcesCVE-2026-417091

CISA lists VMware ESX logging flaw exploited by Warp Panda

CVE-2026-41709 lets an admin skip some logs; federal agencies must patch by November 11, 2026.

The Hacker Newsupdated Oct 29, 16:25 UTC · 1d agofirst Oct 29, 06:22 UTC · 2d agoExploit / PoCExploited9 sourcesCVE-2026-417092

VMware is pushing so many patches, it thinks users need new tools to manage the flood

Broadcom will sell HyperArmor to virtually patch VCF, lock configurations, and add MFA.

The Register · SecurityOct 13, 07:01 UTC · 18d agoToolsCVE-2024-58062 · 1 read

Three Critical VMware Flaws Allow Auth Bypass, Code Execution, and VM Escape

Broadcom patches three critical VMware flaws, including vCenter auth bypass CVE-2026-59309 and an ESX VM escape, urging immediate updates.

The Hacker NewsAug 11, 15:42 UTC · Aug 11, 2026VulnerabilityCVE-2026-59309 CVE-2026-59310 CVE-2026-47876+23

Related CVEs

by mentions

CVE-2026-41709<1%2.7
Insufficient logging in VMware ESX for admin operations
published Jul 30, 2026Broadcom VMware ESXKEV
CVE-2026-593103%9.8
Unauthenticated Path Traversal RCE in Broadcom VMware vCenter Server Syslog
published Jul 30, 2026Broadcom (VMware) vCenter ServerKEVRansomwarePoC ×2
CVE-2024-580681%9.8
Improper Authentication vulnerability in Progress MOVEit Transfer (SFTP module) can lead to Authentication Bypass.This issue affects MOVEit Transfer
published Jun 25, 2024progress moveit transfer
CVE-2026-593098%9.8
VMware vCenter contains an authentication bypass vulnerability in the VMware Directory Service
published Jul 30, 2026vmware vcenter server
CVE-2026-47876<1%9.3
VMware ESX contains an out-of-bounds write vulnerability in the VMXNET3 virtual network adapter
published Jul 30, 2026
CVE-2026-41703<1%7.6
VMware ESX, Workstation, and Fusion contain an out-of-bounds read vulnerability
published Jul 30, 2026

Appears with

Broadcomvendor · 5
CISAorganization · 3
VMwarevendor · 2
VMware ESXiproduct · 2
VMware Telco Cloud Platformproduct · 2
vSphere Foundationproduct · 2
CrowdStrikeorganization · 2
VMware ESXproduct · 2
VMware vCenterproduct · 1
ESXproduct · 1
VerdantBamboothreat actor · 1
Defused Cyberorganization · 1
MOVEitproduct · 1
SharpStormmalware · 1
VMware vSphere Foundationproduct · 1
Armory Castlethreat actor · 1

Entities are extracted by the model from each article. First seen Aug 11, 2026, last mentioned 2d ago. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.