CISA adds VMware ESX and Linux kernel flaws to KEV
CVE-2026-41709 and CVE-2026-46300 are actively exploited; BOD 26-04 requires FCEB agencies to prioritize them.
Stories per day · 30 days
2 RSS
Relatedvmware3broadcom2cisa-kev2bod-26-041hyperarmor1insufficient-logging1linux-kernel1mfa1vcf1virtual-patching1
4 stories, newest first · one card per story
Stories tagged #esx
CISA KEV: VMware ESX logging flaw CVE-2026-41709 exploited
An attacker who already has admin access can perform certain ESX operations without them being logged; due November 11.
VMware is pushing so many patches, it thinks users need new tools to manage the flood
Broadcom will sell HyperArmor to virtually patch VCF, lock configurations, and add MFA.
Three Critical VMware Flaws Allow Auth Bypass, Code Execution, and VM Escape
Broadcom patches three critical VMware flaws, including vCenter auth bypass CVE-2026-59309 and an ESX VM escape, urging immediate updates.
3