HIGH Vulnerabilities
CVE-2026-41709: Broadcom VMware ESX Active Exploitation
CISA adds CVE-2026-41709 in VMware ESX to its KEV catalog, warning of active exploitation in the wild. Apply vendor mitigations immediately.
- Broadcom VMware ESX contains an insufficient logging vulnerability actively exploited in the wild, enabling attackers to hide malicious actions.
- VMware ESX deployments are affected when attackers leverage existing administrative privileges to evade forensic detection.
- Apply vendor patches or mitigations immediately, and comply with CISA Binding Operational Directive 26-04 requirements.
Runtime Rebel Intel
3 min read · Nov 1, 2026