CVE-2026-41709

Low2.7Published on July 30, 2026

VMware ESX contains an insufficient logging vulnerability. A malicious administrator could exploit this issue to perform certain operations without them being logged.

CVSS score2.7 / 10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N

Weakness type (CWE)CWE-778

Vulnerabilities

VMware patches critical flaws: VM escape and risk of total control of the virtual infrastructure

Broadcom patched critical VMware flaws in ESXi and vCenter. Updates fix severe VM escape and RCE flaws risking total virtual infrastructure control.

Jul 29, 202617:143 min readRead

This product uses the NVD API but is not endorsed or certified by the NVD.

CVE database

Related articles

VMware patches critical flaws: VM escape and risk of total control of the virtual infrastructure