CVE-2026-41709

CVE Enrichment

CVSS: 2.7 LOW
EPSS: 0.30%
EPSS Percentile: 22.14%
CISA KEV: Not listed

Description

VMware ESX contains an insufficient logging vulnerability. A malicious administrator could exploit this issue to perform certain operations without them being logged.

Technical Details

CVSS Version: 3.1
CNA / NVD Source: [email protected]
Published: 30-Jul-2026 21:16
Last Modified: 31-Jul-2026 02:07
EPSS Date: 2026-10-25
CWE: CWE-778

CVSS Vector


            CVSS:3.1                            AV:N /
                            AC:L /
                            PR:H /
                            UI:N /
                            S:U /
                            C:N /
                            I:L /
                            A:N

References

[email protected]

Last enrichment sync: 26-Oct-2026 18:25
Sources: NVD · FIRST EPSS · CISA KEV
Latest successful provider update; providers refresh independently.

Reported Context (2)

CVE-2026-41709: An insufficient logging vulnerability that allows a malicious ESX administrator to perform certain operations without them being logged. Broadcom Patches Five VMware Flaws, Including VM Escape and Authentication Bypass
CVE-2026-41709 (CVSS score: 2.7) – An insufficient logging vulnerability in VMware ESX that a malicious administrator can exploit to perform certain operations without them being logged. Broadcom Patches VMware Flaws That Could Enable Authentication Bypass and Code Execution

CVE (4)

Malware (1)

MITRE ATT&CK (2)

Vendors (2)

Products (11)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.