Warning Against Vulnerabilities Exploited in Actual Attacks (Broadcom VMware ESX)

Overview

The Cybersecurity and Infrastructure Security Agency (CISA) has released a list of vulnerabilities currently being exploited in attacks. This advisory includes CVE-2026-41709 in Broadcom VMware ESX.

Vulnerability Information

• CVE-2026-41709. – Product: Broadcom VMware ESX. – Vulnerability Type: Insufficient logging vulnerability.

Recommendations

• Apply mitigation measures in accordance with the manufacturer’s instructions. – Comply with CISA BOD 26-04 guidelines on risk-based security update prioritization and forensic classification requirements. – Apply the BOD 26-04 guidelines to cloud services. – Discontinue use of the product if no mitigation measures are available.

Note

CISA has disclosed that this vulnerability is being exploited in actual attacks. Users of this product should update to the latest version.