PRIORITY: CRITICAL (KEV)CVSS not yet scoredActively exploited · CISA KEV since 2026-10-28Vulnerability
CVE-2026-41709
Broadcom VMWare ESX contains an insufficient logging vulnerability that could allow a malicious actor with admin access to perform certain operations without being logged.
Properties
- Last source
- CISA KEV
- Product
- VMware ESX
- Vulnerability name
- Broadcom VMWare ESX Insufficient Logging Vulnerability
- Cve id
- CVE-2026-41709
- First seen by Signal
- 2026-10-28T23:44:23+00:00
- Due date
- 2026-11-11
- Vendor project
- Broadcom
- Retrieved at
- 2026-10-28T23:44:23+00:00
- Required action
- Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discon
- Date added
- 2026-10-28
Related Entities (2)
DESCRIBES (1)
INVOLVES (1)
Explore deeper with Ninja Signal's threat intelligence graph