CVE-2026-41709

VMware ESX contains an insufficient logging vulnerability. A malicious administrator could exploit this issue to perform certain operations without them being logged.

CVSS

2.7

EPSS

0.003 (22.3th percentile)

CISA KEV

Added 2026-10-28, due 2026-11-11

Exploitation

active

Public exploits

None seen

State

PUBLISHED

Coverage

• ● Actively exploitedCritical 80SecurityWeek◇Specialist. Specialist publisher: established trade press, or expert analysis with a track record2 hours ago

  Chinese Hackers Quietly Used Low-Severity ESXi Logging Flaw as Zero-Day

  CVE-2026-41709 allows attackers with administrative privileges to perform operations without being logged. The post Chinese Hackers Quietly Used Low-Severity ESXi Logging Flaw as Zero-Day appeared first on SecurityWeek.

  ↗securityweek.com/chinese-hackers-quietly-used-l…(opens the publisher's site in a new tab)

• ● Actively exploitedCritical 95CISA advisories & alerts◆Authoritative. Authoritative publisher: a primary source, or a newsroom with formal editorial standards22 hours ago

  CISA Adds Two Known Exploited Vulnerabilities to Catalog

  CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2026-41709 Broadcom VMWare ESX Insufficient Logging Vulnerability CVE-2026-46300 Linux Kernel Missing Initialization of a Variable Vulnerability These types of…

  ↗cisa.gov/news-events/alerts/2026/10/28/cisa-add…(opens the publisher's site in a new tab)

What we observed

1. 28 Oct, 19:50kev addedcisa-kev