VMware ESX flaw lets admin actions go unlogged; exploited in the wild
Original title：CISA KEV added CVE-2026-41709: Broadcom VMware ESX – Broadcom VMWare ESX Insufficient Logging Vulnerability
What happened
VMware ESX has a flaw that lets an attacker with admin access perform some operations without them being logged. CISA lists it as exploited in the wild, so attack traces could go missing.
Who is affected
- Organizations running VMware ESX themselves
- Agencies hosting servers on ESX
What to do
Check Broadcom's advisory for affected and fixed versions and apply the update soon. Also review ESX admin accounts and access sources for suspicious logins.
Affected products
| Product | Affected | Fixed in |
|---|---|---|
| Broadcom VMware ESX | 要確認 | 要確認 |
Why this flag
CISA KEV に掲載（悪用確認済み）。影響範囲は限定的と判断
Double yellow: great danger, be ready to stop — Severe impact with a public exploit or reported (unconfirmed) exploitation, including RED candidates under review.
Sources
- Primary source：CISA Known Exploited Vulnerabilities ↗
- CVE：CVE-2026-41709 ↗