cyber.hendryadrian.com
Vulnerability & Exploit · thehackernews.com

Broadcom Patches VMware Flaws That Could Enable Authentication Bypass and Code Execution

· Original article ↗

Summary

Broadcom patched five VMware flaws affecting ESX, vCenter, Workstation and Fusion, including issues that could enable authentication bypass, code execution or VM escape. Broadcom reported no evidence of in-the-wild exploitation.

Key points

  • CVE-2026-59309 is a critical vCenter authentication-bypass flaw; CVE-2026-59310 is a critical directory-traversal flaw that could enable arbitrary code execution.
  • CVE-2026-47876 is an out-of-bounds write in the VMXNET3 adapter that could let an attacker with local VM administrator privileges execute code on the ESX host.
  • CVE-2026-41703 could cause information disclosure or denial of service on ESX; on Workstation and Fusion, its stated impact is information disclosure.
  • CVE-2026-41709 could allow a malicious administrator to perform certain ESX operations without them being logged.
  • Broadcom released fixes for affected VMware ESX, vCenter, Workstation and Fusion versions; the article lists fixed versions for the affected products.
  • Broadcom said it found no evidence that the flaws had been exploited in the wild.

Article Details

Vulnerability Types
  • Authentication bypass
  • Directory traversal
  • Out-of-bounds write
  • Out-of-bounds read
  • Insufficient logging
Severity
Critical for three flaws (CVSS 9.8, 9.8, and 9.3); other reported scores are 7.6 and 2.7.
Affected Versions
  • VMware Cloud Foundation 9.1.x.x
  • VMware vSphere Foundation 9.1.x.x
  • VMware Cloud Foundation 9.0.x.x
  • VMware vSphere Foundation 9.0.x.x
  • VMware vCenter 8.0
  • VMware Cloud Foundation 5.x
Exploitation Status
not_reported
Exploit Availability
unknown
Patch Status
available

CVE

CVE-2026-41703CVE-2026-41703 (CVSS score: 7.6) – An out-of-bounds read vulnerability in VMware ESX that a malicious actor with VM deployment privileges could trigger, potentially leading to information disclosure or aCVE-2026-41709CVE-2026-41709 (CVSS score: 2.7) – An insufficient logging vulnerability in VMware ESX that a malicious administrator can exploit to perform certain operations without them being logged.CVE-2026-47876CVE-2026-47876 is an out-of-bounds write in VMXNET3 that may allow code execution on the ESX host.CVE-2026-59309CVE-2026-59309 is a critical authentication bypass in VMware vCenter.CVE-2026-59310CVE-2026-59310 is a critical directory-traversal flaw that can lead to arbitrary code execution.

Vendors

BroadcomBroadcom has issued security updates for VMware ESX, vCenter, Workstation, and Fusion to fix multiple vulnerabilities, including three critical flaws in vCenter.

Products

VMware Cloud FoundationVMware Cloud Foundation, VMware vSphere Foundation versions 9.1.x.x (Fixed in 9.1.0.0300)VMware ESXBroadcom has issued security updates for VMware ESX, vCenter, Workstation, and Fusion to fix multiple vulnerabilities, including three critical flaws in vCenter.VMware Fusionand ESXi-9.0.2.0100-25595025, VMware ESX ESXi80U3i-25205845, VMware Workstation 26H1, VMware Fusion 26H1, and VMware Cloud Foundation 5.2.3)VMware vCenter ServerBroadcom has issued security updates for VMware ESX, vCenter, Workstation, and Fusion to fix multiple vulnerabilities, including three critical flaws in vCenter.VMware vSphere FoundationVMware Cloud Foundation, VMware vSphere Foundation versions 9.1.x.x (Fixed in 9.1.0.0300)VMWare WorkstationOn VMware Workstation and Fusion, the impact is limited to information disclosure.VMXNET3CVE-2026-47876 is an out-of-bounds write in VMXNET3 that may allow code execution on the ESX host.

Related Articles