CVE-2026-41709
Cloud Foundation: ESX insufficient logging vulnerability
VMware Cloud FoundationContainers & cloud
CVSS
2.7LowExploitationExploitation reportedCISA's assessment says active exploitation, assessed 28 Oct 2026. Not yet in the KEV catalogCISA via CVE List
Exploit odds (EPSS)0.30%Chance of exploitation activity in the next 30 days, higher than 22% of CVEs. Scored 28 Oct 2026FIRST EPSS
What fixes it
- 5.2.4Cloud FoundationCVE List
A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.
Timeline
- 30 Jul 2026, 12:45 UTCPublishedCVE List
- 28 Oct 2026, 12:00 UTCFirst reported exploitedCISA advisories
- NowNot on CISA's known exploited list yet
Vendor and government advisories 1
Vendors that say their products are affected, and agencies that issued alerts. Check each for the fixed release of the product you run.
Reports 4
2 outlets report exploitation. Reports are not confirmation; each links to its source.
- @vulnidx-jp.bsky.social: 【悪用確認】CVE-2026-41709 Broadcom VMWare ESX Insufficient Logging Vulnerability Broadcom VMware ESX CISA 追加 10/28・対応期限 11/11 https://nvd.nist.gov/vuln/detail/CVE-2026-41709 #脆弱性 #KEVBluesky: CVE posts, 28 Oct 2026
- @thecircuitry.to: CISA says it added CVE-2026-41709, an insufficient logging flaw in Broadcom VMware ESX, to its Known Exploited Vulnerabilities catalog. It requires admin access. CISA set a Nov. 11Bluesky: CVE posts, 28 Oct 2026Exploitation reported
- @cyfar.ca: ~Cisa~ CISA reports active exploitation of VMware ESX and Linux Kernel flaws; prioritize remediation. - IOCs: CVE-2026-41709, CVE-2026-46300 - #CVE-2026-41709 #CVE-2026-46300 #ThreBluesky: CVE posts, 28 Oct 2026
- CISA Adds Two Known Exploited Vulnerabilities to CatalogCISA advisories, 28 Oct 2026Exploitation reported
Description
VMware ESX contains an insufficient logging vulnerability. A malicious administrator could exploit this issue to perform certain operations without them being logged.
Text from CVE List
Affected versions 10
- Cloud Foundationaffected: 9.1.x.xCVE List
- Cloud Foundationaffected: 9.0.x.xCVE List
- Cloud Foundationaffected: 5.x before 5.2.4CVE List
- vSphere Foundationaffected: 9.1.x.xCVE List
- vSphere Foundationaffected: 9.0.x.xCVE List
- ESXaffected: 9.1.x.x before ESXi-9.1.0.0-25370933CVE List
- ESXaffected: 9.0.x.x before ESXi-9.0.2.0100-25595025CVE List
- ESXaffected: 8.0 before ESXi80U3j-25429389CVE List
- Telco Cloud Platformaffected: 5.1.xCVE List
- Telco Cloud Platformaffected: 5.0.xCVE List