CVE-2026-41709Low· 2.7▾ Twilight⚠ Exploited in the wildPoC availableVMware ESX contains an insufficient logging vulnerability. A malicious administrator could exploit this issue to perform certain operations without them being logged.
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 14.9 · likelihood 0.1 · exploitation 25
A public proof-of-concept already exists for this vulnerability — see Exploit availability below.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake. The CVSS score shown above comes from the assigning CNA record, not NVD.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
Federal remediation due Nov 11, 2026
Last analysed / modified upstream
0.7%
Added to the CISA catalog on Oct 28, 2026. Federal remediation due Nov 11, 2026. View catalog ↗
VMware ESX contains an insufficient logging vulnerability. A malicious administrator could exploit this issue to perform certain operations without them being logged.
cloud_foundation 9.1.x.xcloud_foundation 9.0.x.xcloud_foundation >= 5.x < 5.2.4vsphere_foundation 9.1.x.xvsphere_foundation 9.0.x.xESX >= 9.1.x.x < ESXi-9.1.0.0-25370933ESX >= 9.0.x.x < ESXi-9.0.2.0100-25595025ESX >= 8.0 < ESXi80U3j-25429389telco_cloud_platform 5.1.xtelco_cloud_platform 5.0.xRefer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-59310Critical· 9.8vCenter directory-traversal vulnerability
CVE-2021-22054High· 7.5VMware Workspace ONE UEM console 20.0.8 prior to 20.0.8.37, 20.11.0 prior to 20.11.0.40, 21.2.0 prior to 21.2.0.27, and 21.5.0 prior to 21.5.0.37 contain an SSRF vulnerability
CVE-2021-21975High· 7.5Server Side Request Forgery in vRealize Operations Manager API (CVE-2021-21975) prior to 8.4 may allow a malicious actor with network access to the vRealize Operations Manager API can perform a Server Side Request Forgery attack to steal…
CVE-2021-21985Critical· 9.8The vSphere Client (HTML5) contains a remote code execution vulnerability due to lack of input validation in the Virtual SAN Health Check plug-in which is enabled by default in vCenter Server
CVE-2021-21972Critical· 9.8The vSphere Client (HTML5) contains a remote code execution vulnerability in a vCenter Server plugin
CVE-2020-3992Critical· 9.8OpenSLP as used in VMware ESXi (7.0 before ESXi_7.0.1-0.0.16850804, 6.7 before ESXi670-202010401-SG, 6.5 before ESXi650-202010401-SG) has a use-after-free issue