Dashboard / CVE-2026-41709

CVE-2026-41709

LOW CISA KEV
ACT NOW Priority: 0.01 BB Relevance: 50/100
Published: 2026-07-30 Modified: 2026-10-29 First seen: 2026-10-29 Status: active

Attack Surface

Network Low Complexity No Interaction

CVSS Vector Breakdown

AV: Network
AC: Low
PR: High
UI: None
S: Unchanged
C: None
I: Low
A: None

Description

Broadcom VMWare ESX contains an insufficient logging vulnerability that could allow a malicious actor with admin access to perform certain operations without being logged.

CISA Known Exploited Vulnerability

Vendor / Product Broadcom — VMware ESX
Date Added 2026-10-28
Remediation Due 2026-11-11
https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/38017 ; ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-41709

Weakness Classification (1)

Affected Software (60)

VendorProductVersion
VMware Cloud Foundation 9.1.x.x
VMware Cloud Foundation 9.0.x.x
VMware Cloud Foundation 5.x < 5.2.4
VMware Cloud Foundation 9.1.x.x
VMware Cloud Foundation 9.0.x.x
VMware Cloud Foundation 5.x < 5.2.4
VMware Cloud Foundation 9.1.x.x
VMware Cloud Foundation 9.0.x.x
VMware Cloud Foundation 5.x < 5.2.4
VMware Cloud Foundation 9.1.x.x
VMware Cloud Foundation 9.0.x.x
VMware Cloud Foundation 5.x < 5.2.4
VMware Cloud Foundation 9.1.x.x
VMware Cloud Foundation 9.0.x.x
VMware Cloud Foundation 5.x < 5.2.4
VMware Cloud Foundation 9.1.x.x
VMware Cloud Foundation 9.0.x.x
VMware Cloud Foundation 5.x < 5.2.4
VMware ESX 9.1.x.x < ESXi-9.1.0.0-25370933
VMware ESX 9.0.x.x < ESXi-9.0.2.0100-25595025
VMware ESX 8.0 < ESXi80U3j-25429389
VMware ESX 9.1.x.x < ESXi-9.1.0.0-25370933
VMware ESX 9.0.x.x < ESXi-9.0.2.0100-25595025
VMware ESX 8.0 < ESXi80U3j-25429389
VMware ESX 9.1.x.x < ESXi-9.1.0.0-25370933
VMware ESX 9.0.x.x < ESXi-9.0.2.0100-25595025
VMware ESX 8.0 < ESXi80U3j-25429389
VMware ESX 9.1.x.x < ESXi-9.1.0.0-25370933
VMware ESX 9.0.x.x < ESXi-9.0.2.0100-25595025
VMware ESX 8.0 < ESXi80U3j-25429389
Showing 30 of 60 entries

References & Advisories (2)

Bug Bounty Relevance

50 / 100
✓ Network accessible
✓ Low complexity
✓ No user interaction
✓ Known exploited (KEV)

CVSS Score

2.7 / 10.0 v3.1
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N

EPSS — Exploitation Probability

0.30%
Raw Score 0.002970
Percentile 22.3%
Date 2026-10-28

Intelligence Sources

kev ref →
mitre ref →
nvd ref →

External Links