Warp Panda used low-severity ESXi flaw CVE-2026-41709 as a zero-day
CISA added the logging bug to KEV and gave US federal agencies two weeks to install the patched ESXi builds.
78
Product
VMware Workstation
- Mentions · 7d1
- Mentions · 30d4
- All mentions8
- First seenAug 11, 2026
- Last mentioned1d ago
Timeline
8 articles · newest firstPoC Exploit Released for Critical VMware Vulnerability Enabling Guest-to-Host Attacks
Public PoC for CVE-2026-59346 crashes VMware Workstation and Fusion through a guest-to-host integer overflow.
66
PoC Released for Critical VMware VMXNET3 Flaw Enabling Guest-to-Host Code Execution
Public PoC for VMware CVE-2026-59346 crashes the host VMX process but does not prove code execution.
66
Broadcom VMware security advisory (AV26-1008)
Canada's Cyber Centre urges updates for VMware Workstation and Fusion overflow flaws.
46
ZDI-26-647: VMware Workstation VMXNET3 TSO Segmentation Integer Overflow Local Privilege Escalation Vulnerability
ZDI disclosed an integer overflow in VMware Workstation's VMXNET3 TSO code (CVE-2026-59346) enabling local privilege escalation.
30
Critical VMware Workstation and Fusion Flaw Lets VM Admins Execute Host Code
Broadcom patched two VMware Workstation and Fusion flaws, including critical integer overflow CVE-2026-59346 (CVSS 9.3), letting guest admins execute host code; no exploitation seen.
60
Broadcom Patches Critical VMware Workstation and Fusion VM
Broadcom patched critical VMware Workstation and Fusion VM-escape flaws CVE-2026-59346 (CVSS 9.3) and CVE-2026-59347 (CVSS 8.1); update to 26H1u1.
65
Three Critical VMware Flaws Allow Auth Bypass, Code Execution, and VM Escape
Broadcom patches three critical VMware flaws, including vCenter auth bypass CVE-2026-59309 and an ESX VM escape, urging immediate updates.
80
Related CVEs
by mentions- CVE-2026-59346<1%9.3VMXNET3 integer overflow in VMware Workstation and Fusion
- CVE-2026-593103%9.8Unauthenticated Path Traversal RCE in Broadcom VMware vCenter Server Syslog
- CVE-2026-593098%9.8VMware vCenter contains an authentication bypass vulnerability in the VMware Directory Service
- HGFS stack buffer overflow in VMware Workstation and Fusion
- CVE-2026-41709<1%2.7Insufficient logging in VMware ESX for admin operations
- CVE-2025-412362%9.3VMware ESXi, Workstation, and Fusion contain an integer-overflow vulnerability in the VMXNET3 virtual network adapter
- CVE-2026-47876<1%9.3VMware ESX contains an out-of-bounds write vulnerability in the VMXNET3 virtual network adapter
- CVE-2026-41703<1%7.6VMware ESX, Workstation, and Fusion contain an out-of-bounds read vulnerability
Appears with
- VMwarevendor · 8
- Broadcomvendor · 7
- VMware Fusionproduct · 7
- Broadcomorganization · 2
- VMware vCenterproduct · 2
- Zero Day Initiativeorganization · 2
- VMXNET3product · 2
- DualGaugemalware · 1
- Defused Cyberorganization · 1
- SharpStormmalware · 1
- VMwareorganization · 1
- Quirsoorganization · 1
- TetanusStormmalware · 1
- VMware ESXproduct · 1
- VMware ESXiproduct · 1
- Tencent Xuanwu Labvendor · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.