CVE-2026-41709

Published Jul 30, 2026

Last updated 21 days ago

CVSS low 2.7
Server

Overview

Description
VMware ESX contains an insufficient logging vulnerability. A malicious administrator could exploit this issue to perform certain operations without them being logged.
Source
security@vmware.com
NVD status
Awaiting Analysis

Risk scores

CVSS 3.1

Type
Secondary
Base score
2.7
Impact score
1.4
Exploitability score
1.2
Vector string
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N
Severity
LOW

Weaknesses

security@vmware.com
CWE-778

Social media

Hype score
Not currently trending

  1. Teils kritische Schwachstellen (CVE-2026-59309, CVE-2026-59310, CVE-2026-47876, CVE-2026-41703, CVE-2026-41709) in VMware by Broadcom-Produkten (VMware ESX, vCenter, Workstation, Fusion). Updates sind laut Adversory vorhanden. https://t.co/JefXtYbpy2

    @etguenni

    31 Jul 2026

    337 Impressions

    1 Retweet

    2 Likes

    0 Bookmarks

    1 Reply

    0 Quotes

  2. 🐛 VULNERABILITIES CVE Notify: 🚨 [CVE-2026-41709](https://t.co/QZyuml57L1... https://t.co/HSJVk59Jdn #Vulnerability #CVE #ZeroDay

    @MalwareObserver

    30 Jul 2026

    43 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

  3. VMSA-2026-0006: VMware ESX, vCenter, Workstation, and Fusion updates address multiple vulnerabilities (CVE-2026-59309, CVE-2026-59310, CVE-2026-47876, CVE-2026-41703, CVE-2026-41709) https://t.co/d4U3b5FBIT

    @autumn_good_35

    30 Jul 2026

    739 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    1 Quote

  4. VMSA-2026-0006: VMware ESX, vCenter, Workstation, and Fusion updates address multiple vulnerabilities (CVE-2026-59309, CVE-2026-59310, CVE-2026-47876, CVE-2026-41703, CVE-2026-41709) https://t.co/WmqO1KgmBJ

    @makopicut

    29 Jul 2026

    88 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    1 Reply

    0 Quotes

  5. 🚨 5 VMware flaws just patched by Broadcom (ESXi, vCenter, Workstation, Fusion): 🔴 Critical: CVE-2026-47876 – VM escape via VMXNET3 adapter CVE-2026-59309 – vCenter auth bypass CVE-2026-59310 – vCenter RCE 🟠 High: CVE-2026-41703 – DoS/info leak 🟡 Low: CVE-20

    @techepages

    29 Jul 2026

    55 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

Related CVEs

  1. VMware vCenter contains an authentication bypass vulnerability in the VMware Directory Service. A malicious actor with network access to vCenter may exploit this issue to bypass authentication and gain unauthorized access to the system.•CVE-2026-59309
  2. Broadcom VMware vCenter Path Traversal Vulnerability•CVE-2026-59310
  3. VMware ESX contains an out-of-bounds write vulnerability in the VMXNET3 virtual network adapter. A malicious actor with local administrative privileges on a virtual machine with VMXNET3 virtual network adapter may exploit this issue to execute code on the host. Non VMXNET3 virtual adapters are not affected by this issue.•CVE-2026-47876
  4. VMware ESX, Workstation, and Fusion contain an out-of-bounds read vulnerability. A malicious actor with VM deployment privileges could trigger an out-of-bounds read, potentially leading to information disclosure or more likely a Denial-of-Service (DoS) condition of the host process. On Workstation and Fusion, the impact of this vulnerability is restricted to information disclosure.•CVE-2026-41703
  5. Improper authorization in Azure Portal allows an unauthorized attacker to disclose information over a network.•CVE-2026-62835

References

Sources include official advisories and independent security research.