Firetruck

CVE-2026-41709

KEV
Updated Oct 29, 2026 · PUBLISHED
View KEV entry →

Description

Broadcom VMWare ESX contains an insufficient logging vulnerability that could allow a malicious actor with admin access to perform certain operations without being logged.

Full record on cve.org →

Affected packages

PackageVendor / ProductVersion rangeStatus
Cloud FoundationVMware / Cloud Foundation>= 5.x, < 5.2.4affected
Cloud FoundationVMware / Cloud Foundation9.0.x.xaffected
Cloud FoundationVMware / Cloud Foundation9.1.x.xaffected
ESXVMware / ESX>= 8.0, < ESXi80U3j-25429389affected
ESXVMware / ESX>= 9.0.x.x, < ESXi-9.0.2.0100-25595025affected
ESXVMware / ESX>= 9.1.x.x, < ESXi-9.1.0.0-25370933affected
Telco Cloud PlatformVMware / Telco Cloud Platform5.0.xaffected
Telco Cloud PlatformVMware / Telco Cloud Platform5.1.xaffected
vSphere FoundationVMware / vSphere Foundation9.0.x.xaffected
vSphere FoundationVMware / vSphere Foundation9.1.x.xaffected