Skip to main content

VMware ESX vulnerabilities

1 published alerts for Broadcom VMware ESX.

Actively exploited (KEV)

CVE-2026-41709

Broadcom VMWare ESX Insufficient Logging Vulnerability

Broadcom VMware ESX is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2026-41709). Broadcom VMWare ESX contains an insufficient logging vulnerability that could allow a malicious actor with admin access to perform certain operations without being logged. CISA remediation due date: 2026-11-11. If you need help checking exposure, call (864) 335-9223.