CISA adds exploited VMware ESXi logging flaw CVE-2026-41709 to KEV
Federal remediation is due November 11, 2026; the CVSS 2.7 flaw only hides actions by someone who already has admin rights.
Stories per day · 30 days
3 RSS
Relatedvmware5routers4wps4cisa-kev2esx2esxi2insufficient-logging2wi-fi2wifi23-d-secure1ai-infrastructure1ai-roi1amd1arcot1belgium1buffer-overflow1cisa1compute1
21 stories, newest first · one card per story
Stories tagged #broadcom
CISA lists exploited VMware ESX logging flaw CVE-2026-41709
An administrator can omit expected log records; Broadcom rates it CVSS 2.7 and federal remediation is due November 11.
CISA KEV: VMware ESX logging flaw CVE-2026-41709 exploited
An attacker who already has admin access can perform certain ESX operations without them being logged; due November 11.
Meta plans up to $95 billion in stock sales to fund AI buildout
About $22.5 billion would come from Class A stock, $12.5 billion from depositary shares, and $60 billion from later Class C sales.
Broadcom adds Arcot Scam Defense to 3-D Secure authentication
Broadcom says reviewing one issuer’s top 1% of successful challenges could have covered about $4 million in a month.
Broadcom WPS flaw lets nearby attackers gain root on Wi-Fi routers
The bug has sat in Broadcom’s SDK since at least 2010, has no CVE, and tested Belgian gateways were still unpatched.
16-year-old Broadcom WPS flaw can give nearby attackers router control
Researcher demos stole a Wi-Fi password and opened a shell without the network key; tested Belgian gateways were still unpatched.
Unpatched Broadcom WPS flaw lets nearby attackers run code as root
Quentin Kaiser's own exploits read a Wi-Fi password and opened an over-the-air shell; he reports no real-world attacks.
Broadcom Wi-Fi bug since 2010 allows unauthenticated router code execution
Quentin Kaiser demonstrated exploits on two Belgian ISP routers; Broadcom assigned no CVE after an incomplete 2018 fix.
Topgolf saved over $11.3M after leaving VMware
Topgolf reports more than $11.3 million saved after migrating from VMware to VergeOS.
VMware is pushing so many patches, it thinks users need new tools to manage the flood
Broadcom will sell HyperArmor to virtually patch VCF, lock configurations, and add MFA.
The CEO's of Broadcom and Intel Say the Quiet Part Out Loud about AI and ROI
Broadcom and Intel CEOs say AI ROI and financing remain uncertain despite massive infrastructure spending.
PoC Exploit Released for Critical VMware Vulnerability Enabling Guest-to-Host Attacks
Public PoC for CVE-2026-59346 crashes VMware Workstation and Fusion through a guest-to-host integer overflow.
How OpenAI Used Its Own LLMs to Design Its Jalapeño Chip
OpenAI's Jalapeño AI accelerator, co-designed with Broadcom, went from concept to silicon in under 20 months using LLM-driven design workflows.
3
CISA: Critical VMware RCE flaw now exploited by ransomware gangs
CISA warns ransomware gangs now exploit critical VMware vCenter syslog RCE CVE-2026-59310, already KEV-listed after APT compromises across 47 countries.
Critical VMware Workstation and Fusion Flaw Lets VM Admins Execute Host Code
Broadcom patched two VMware Workstation and Fusion flaws, including critical integer overflow CVE-2026-59346 (CVSS 9.3), letting guest admins execute host code; no exploitation seen.
Broadcom Patches Critical VMware Workstation and Fusion VM
Broadcom patched critical VMware Workstation and Fusion VM-escape flaws CVE-2026-59346 (CVSS 9.3) and CVE-2026-59347 (CVSS 8.1); update to 26H1u1.
Researchers Link 'Jewelbug' Chinese APT to Hack-for-Hire Operations
Broadcom researchers link the Chinese APT group 'Jewelbug' to a lucrative crypto-fraud hack-for-hire operation.
vCenter Flaw Exploited Just Five Days After Disclosure
Attackers began exploiting critical vCenter flaw CVE-2026-59310 five days after Broadcom's disclosure, putting enterprise VMware deployments at risk.
1
Attackers Exploit VMware vCenter Vulnerability to Gain Persistent Remote Access
Attackers actively exploit critical VMware vCenter flaw CVE-2026-59310, installing reverse_ssh backdoors on 361 hosts across 47 countries.
Three Critical VMware Flaws Allow Auth Bypass, Code Execution, and VM Escape
Broadcom patches three critical VMware flaws, including vCenter auth bypass CVE-2026-59309 and an ESX VM escape, urging immediate updates.
3