Product
ESXi
- First Reported
- Aug 12, 2021
- Latest Reported
- Nov 6, 2026
Reported Context (61)
- Kaspersky GERT recently investigated two more ransomware cases on ESXi and Proxmox environments in which weak access controls, insufficient network separation, exposed administrative services, and poor management of Misconfigurations Enabled Ransomware Attacks on ESXi and Proxmox
- Unit 42 reported Qilin and INC Ransom opening GlobalProtect sessions without MFA and pivoting to vCenter and ESXi. CYFIRMA Reports Record 1,178 Ransomware Victim Claims in October
- The US cybersecurity agency CISA on Wednesday warned that hackers have been exploiting another VMware ESXi vulnerability in attacks. CISA Flags Exploited VMware ESXi Logging Flaw; CrowdStrike Links Zero-Day Use to Warp Panda
- Inside Qilin ransomware: ESXi attacks, affiliate networks and double extortion Acronis Analyzes Qilin Ransomware’s Windows and ESXi Capabilities
- In several of these cases, and as late as early 2026, the adversary exploited ESXi command logging bypass vulnerability CVE-2026-41709 as a zero-day. CrowdStrike Report Details Rising eCrime and China-Linked Threats to Legal Sector
CVE (67)
Malware (137)
People (30)
Threat Actors (158)
MITRE ATT&CK (169)
Vendors (96)
Products (172)
Tools (172)
Industries (89)
Countries (50)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.