CVE-2026-41709

Vendor

VMware (Broadcom)

Product

VMware ESX

EPSS

0.007 (p53)

CISA KEV

added 28 Oct 2026, due 11 Nov 2026 (10d)

Weakness

CWE-778

Exposure class

Operating system, Hypervisor

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 75
   KEV CISA KEV 4d ago

   Broadcom VMWare ESX Insufficient Logging Vulnerability

   Broadcom VMWare ESX contains an insufficient logging vulnerability that could allow a malicious actor with admin access to perform certain operations without being logged.

   KEV · due 11 Nov 2026 Fix available CVE-2026-41709 VMware (Broadcom)
2. 66
   CISA alert CISA 3d ago

   CISA Adds Two Known Exploited Vulnerabilities to Catalog

   CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2026-41709 Broadcom VMWare ESX Insufficient Logging Vulnerability CVE-2026-46300 Linux…

   Exploited EPSS 0.16 CVE-2026-41709CVE-2026-46300 VMware (Broadcom) Linux kernel
3. 38
   News SecurityWeek 2d ago

   Chinese Hackers Quietly Used Low-Severity ESXi Logging Flaw as Zero-Day

   CVE-2026-41709 allows attackers with administrative privileges to perform operations without being logged. The post Chinese Hackers Quietly Used Low-Severity ESXi Logging Flaw as Zero-Day appeared first on SecurityWeek .

   CVE-2026-41709 VMware (Broadcom)
4. 24
   CCCS advisory CCCS 3d ago

   VMware security advisory (AV26-763)

   CVE-2026-41709CVE-2026-59310CVE-2026-59309+2 more VMware (Broadcom)