HIGHVulnerability
Verified
Global

CISA KEV: Broadcom VMware ESX — Broadcom VMWare ESX Insufficient Logging Vulnerability

·Source: CISA KEV

Updated:

Executive Summary

Broadcom VMWare ESX contains an insufficient logging vulnerability that could allow a malicious actor with admin access to perform certain operations without being logged.

Analysis

Broadcom VMWare ESX contains an insufficient logging vulnerability that could allow a malicious actor with admin access to perform certain operations without being logged. Added to CISA Known Exploited Vulnerabilities catalog on 2026-10-28. Remediation due: 2026-11-11.

Indicators of Compromise (1)

CVE (1)
CVE-2026-41709
NVDMITRE CVE
Source Attribution

Originally published by CISA KEV on Oct 28, 2026. Verified by: CISA.

Related Threats

CRITICALZero Day

Chinese Hackers Quietly Used Low-Severity ESXi Logging Flaw as Zero-Day

CVE-2026-41709 allows attackers with administrative privileges to perform operations without being logged. The post Chinese Hackers Quietly Used Low-Severity ESXi Logging Flaw as Zero-Day appeared first on SecurityWeek .

CVE-2026-41709
SecurityWeek
CRITICALZero Day

China-Linked Hackers Exploited VMware ESX Zero-Day to Reduce Audit Trail Visibility

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added a security flaw impacting Broadcom VMware ESX to its Known Exploited Vulnerabilities (KEV) catalog, after CrowdStrike revealed that it had been weaponized by a China-nexus threat actor known as Warp Panda in attacks targeting the U.S. legal sector. The vulnerability in question is CVE-2026-41709 (CVSS score:

CVE-2026-41709
The Hacker News
CRITICALApt

Broadcom patches vulnerabilities all over VMware

Broadcom has addresses five vulnerabilities in its VMware product range, three of which have been accorded a “critical” rating. The affected products are: VMware ESX, VMware vCenter, VMware Workstation, VMware Fusion, VMware Cloud Foundation, VMware vSphere Foundation, VMware Telco Cloud Platform, and VMware Telco Cloud Infrastructure CVE-206-59309 affects the VMware Directory Service. According t

CVE-2026-47876CVE-2026-59310
CSO Online