Intelligence online17 sources monitored12 actively exploited 7d34 published 24hChecked recently
Product

VMware ESX

Made by VMware (Broadcom). 1 of its vulnerabilities are known to have been exploited.

Coverage

HighPatchExploitedCISA KEV

Broadcom VMWare ESX Insufficient Logging Vulnerability (CVE-2026-41709) is being actively exploited, CISA warns

CISA added CVE-2026-41709 (Broadcom VMware ESX) to its Known Exploited Vulnerabilities catalog on October 28, 2026, which means there is reliable evidence of exploitation in the wild. Broadcom VMWare ESX contains an insufficient logging vulnerability that could allow a malicious actor with admin access to perform certain operations without being logged.

Why it matters

CISA lists this as exploited in the wild. Unpatched vSphere / ESXi / vCenter and VMware ESX systems are exposed to active attacks now.

Patch

Apply the vendor's security update for vSphere / ESXi / vCenter and VMware ESX.

CISA Known Exploited VulnerabilitiesEnterprise

Recent intelligence

The latest developments from the last 30 days, newest first.

  1. AdvisoryKEV

    Broadcom VMWare ESX Insufficient Logging Vulnerability (CVE-2026-41709) is being actively exploited, CISA warns

    Basis: CISA Known Exploited Vulnerabilities (government advisory)

  2. Added to CISA KEVCVE-2026-41709

    CVE-2026-41709 added to CISA KEV: Broadcom VMware ESX, Broadcom VMWare ESX Insufficient Logging Vulnerability

    Basis: CISA Known Exploited Vulnerabilities catalog

Actively exploited

CVE-2026-41709CVSS 2.7

Broadcom VMware ESX

Broadcom VMWare ESX Insufficient Logging Vulnerability

Added Oct 28, 2026Fed. due Nov 11, 2026Coverage →