HighVulnerabilityOct 28, 2026

Broadcom VMware ESX insufficient logging flaw added to KEV

CISA added CVE-2026-41709 to the Known Exploited Vulnerabilities catalog. Broadcom VMware ESX contains an insufficient logging vulnerability allowing malicious actors with admin access to perform operations without logging. Apply mitigations per BOD 26-04 guidance. Federal due date: November 11, 2026.

Vulnerabilities

CVE-2026-41709 CVSS 2.7 EPSS 0.3% Exploited (CISA KEV)

Sources

CISA KEVRead the original article
The Hacker NewsRead the original article
SecurityWeekRead the original article

AI-written summary. Check the original reporting before acting.