VMware ESX logging bypass (CVE-2026-41709) added to CISA KEV: admins can act without being logged ยท updates https://pwn.watch/i/vmware-esx-insufficient-logging-cve-2026-41709-cisa-kev CISA added CVE-2026-41709, a VMware ESX insufficient logging vulnerability, to its Known Exploited Vulnerabilities catalog on Oct 28 based on evidence of active exploitation. Broadcom rates it Low (CVSSv3 2.7): a malicious administrator could perform certain operations on ESX without them being logged, which helps an attacker who already has admin access hide activity. Broadcom fixed it in VMSA-2026-0006, first published July 29 2026, and credits Ian Barton of CrowdStrike for reporting it. CrowdStrike's 2026 Legal Threat Landscape Report (Oct 28) says the China-nexus adversary WARP PANDA exploited CVE-2026-41709 as a zero-day in several intrusions, as late as early 2026, while deploying malware in VMware vCenter environments at U.S. entities including legal-sector targets. en Wed, 28 Oct 2026 00:00:00 GMT VMware ESX logging bypass (CVE-2026-41709) added to CISA KEV: admins can act without being logged: CISA adds CVE-2026-41709 (Broadcom VMware ESX Insufficient Logging Vulnerability) to the KEV catalog, based on evidence of active exploitation. https://pwn.watch/i/vmware-esx-insufficient-logging-cve-2026-41709-cisa-kev https://pwn.watch/i/vmware-esx-insufficient-logging-cve-2026-41709-cisa-kev#2026-10-28-b2f54210 Wed, 28 Oct 2026 00:00:00 GMT medium <p><a href="https://www.cisa.gov/news-events/alerts/2026/10/28/cisa-adds-two-known-exploited-vulnerabilities-catalog">Source</a></p> VMware ESX logging bypass (CVE-2026-41709) added to CISA KEV: admins can act without being logged: CrowdStrike's 2026 Legal Threat Landscape Report says China-nexus adversary WARP PANDA exploited CVE-2026-41709 as a zero-day in several intrusions, as late as early 2026, including at legal-sector targets. https://pwn.watch/i/vmware-esx-insufficient-logging-cve-2026-41709-cisa-kev https://pwn.watch/i/vmware-esx-insufficient-logging-cve-2026-41709-cisa-kev#2026-10-28-5c304a8c Wed, 28 Oct 2026 00:00:00 GMT medium <p><a href="https://www.crowdstrike.com/en-us/blog/crowdstrike-2026-legal-threat-landscape-report/">Source</a></p> VMware ESX logging bypass (CVE-2026-41709) added to CISA KEV: admins can act without being logged: Broadcom publishes VMSA-2026-0006, which fixes CVE-2026-41709 in ESX along with vCenter, Workstation and Fusion bugs. https://pwn.watch/i/vmware-esx-insufficient-logging-cve-2026-41709-cisa-kev https://pwn.watch/i/vmware-esx-insufficient-logging-cve-2026-41709-cisa-kev#2026-07-29-302cdb1d Wed, 29 Jul 2026 00:00:00 GMT medium <p><a href="https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/38017">Source</a></p>