VMware ESX

Mentions · 7d5
Mentions · 30d5
All mentions7
First seenAug 11, 2026
Last mentioned1d ago

Timeline

7 articles · newest first

Warp Panda used VMware ESX zero-day; firewalls rooted and crashed

CISA set November 11 and October 31 federal deadlines; Cisco says CVE-2026-76418 is crashing firewalls with no workaround.

Help Net SecurityOct 29, 16:25 UTC · 1d agoExploit / PoCExploited9 sourcesCVE-2026-41709 CVE-2026-46300 CVE-2026-109618+23 · 2 reads

CISA adds VMware ESX and Linux kernel flaws to KEV

Agencies must fix CVE-2026-41709 by November 11, 2026, and Fragnesia CVE-2026-46300 by October 31, 2026.

Security Affairsupdated Oct 29, 16:25 UTC · 1d agofirst Oct 29, 16:05 UTC · 1d agoExploit / PoCExploited9 sourcesCVE-2026-41709 CVE-2026-463001

CISA lists VMware ESX logging flaw exploited by Warp Panda

CVE-2026-41709 lets an admin skip some logs; federal agencies must patch by November 11, 2026.

The Hacker Newsupdated Oct 29, 16:25 UTC · 1d agofirst Oct 29, 06:22 UTC · 1d agoExploit / PoCExploited9 sourcesCVE-2026-417092

CISA adds VMware ESX and Linux kernel flaws to KEV

CVE-2026-41709 and CVE-2026-46300 are actively exploited; BOD 26-04 requires FCEB agencies to prioritize them.

CISA AdvisoriesOct 28, 12:00 UTC · 2d agoExploit / PoCExploitedCVE-2026-41709 CVE-2026-463001

CISA KEV: VMware ESX logging flaw CVE-2026-41709 exploited

An attacker who already has admin access can perform certain ESX operations without them being logged; due November 11.

CISA Known Exploited Vulnerabilitiesupdated Oct 29, 16:25 UTC · 1d agofirst Oct 28, 00:00 UTC · 2d agoExploit / PoCExploited9 sourcesCVE-2026-417091

Vali Cyber ZeroLock 5 brings MFA to the hypervisor command line

Vali Cyber released ZeroLock 5 adding CLI-MFA to protect VMware ESX and Linux hypervisors from insider threats and stolen credentials.

Help Net SecuritySep 2, 00:00 UTC · Sep 2, 2026Tools2 · 1 read

Three Critical VMware Flaws Allow Auth Bypass, Code Execution, and VM Escape

Broadcom patches three critical VMware flaws, including vCenter auth bypass CVE-2026-59309 and an ESX VM escape, urging immediate updates.

The Hacker NewsAug 11, 15:42 UTC · Aug 11, 2026VulnerabilityCVE-2026-59309 CVE-2026-59310 CVE-2026-47876+23

Related CVEs

by mentions

CVE-2026-41709<1%2.7
Insufficient logging in VMware ESX for admin operations
published Jul 30, 2026Broadcom VMware ESXKEV
CVE-2026-4630016%7.8
Shared-frag marker loss in Linux kernel skb coalescing (LPE)
published May 23, 2026linux kernelKEVPoC
CVE-2026-593103%9.8
Unauthenticated Path Traversal RCE in Broadcom VMware vCenter Server Syslog
published Jul 30, 2026Broadcom (VMware) vCenter ServerKEVRansomwarePoC ×2
CVE-2026-109619100%9.2
Use-after-free RCE in PHP via stale request globals
published 9d agophpKEVPoC ×15
CVE-2026-109618100%9.2
OOM longjmp memory flaw enabling RCE in PHP
published 9d agophpKEVPoC ×25
CVE-2026-76418<1%8.6
Unauthenticated DoS in Cisco ASA and FTD SSL VPN with secondary auth
published 2d agoCisco Secure Firewall Adaptive Security Appliance (ASA) SoftwareKEV
CVE-2026-593098%9.8
VMware vCenter contains an authentication bypass vulnerability in the VMware Directory Service
published Jul 30, 2026vmware vcenter server
CVE-2026-47876<1%9.3
VMware ESX contains an out-of-bounds write vulnerability in the VMXNET3 virtual network adapter
published Jul 30, 2026
CVE-2026-41703<1%7.6
VMware ESX, Workstation, and Fusion contain an out-of-bounds read vulnerability
published Jul 30, 2026

Appears with

Broadcomvendor · 6
CISAorganization · 5
Warp Pandathreat actor · 3
CrowdStrikeorganization · 3
Linux kernelproduct · 3
SharpStormmalware · 2
VMwarevendor · 2
BRICKSTORMmalware · 2
VMware vCenterproduct · 2
VMware Cloud Foundationproduct · 2
VMware ESXiproduct · 1
Armory Castlethreat actor · 1
ShinyHuntersthreat actor · 1
Dreamorganization · 1
Palo Alto Networksvendor · 1
VMwareorganization · 1

Entities are extracted by the model from each article. First seen Aug 11, 2026, last mentioned 1d ago. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.