CVE-2026-41709
Broadcom VMWare ESX Insufficient Logging Vulnerability
2.7CVSS base score · low (NVD)
0.3%Chance of exploitation in the next 30 days (FIRST EPSS)
ExploitedIn CISA KEV · federal patch deadline Nov 11, 2026
What happened
CISA added CVE-2026-41709 to the Known Exploited Vulnerabilities catalog. Broadcom VMware ESX contains an insufficient logging vulnerability allowing malicious actors with admin access to perform operations without logging. Apply mitigations per BOD 26-04 guidance. Federal due date: November 11, 2026.
From the Intel60 brief of Oct 28, 2026. AI-written summary: check the sources before acting.
Intel60 briefs
- HighBroadcom VMware ESX insufficient logging flaw added to KEVOct 28, 2026