Vulnerability Details CVE-2026-41709
VMware ESX contains an insufficient logging vulnerability. A malicious administrator could exploit this issue to perform certain operations without them being logged.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.008
EPSS Ranking 55.3%
CVSS Severity
CVSS v3 Score 2.7
Proposed Action
Broadcom VMWare ESX contains an insufficient logging vulnerability that could allow a malicious actor with admin access to perform certain operations without being logged.
Ransomware Campaign
Unknown
References
Products affected by CVE-2026-41709
-
cpe:2.3:a:vmware:cloud_foundation:5.0
-
cpe:2.3:a:vmware:cloud_foundation:5.1
-
cpe:2.3:a:vmware:cloud_foundation:5.1.1
-
cpe:2.3:a:vmware:cloud_foundation:5.2
-
cpe:2.3:a:vmware:cloud_foundation:5.2.1
-
cpe:2.3:a:vmware:cloud_foundation:5.2.1.1
-
cpe:2.3:a:vmware:cloud_foundation:5.2.1.2
-
cpe:2.3:a:vmware:cloud_foundation:5.2.2
-
cpe:2.3:a:vmware:cloud_foundation:5.2.3
-
cpe:2.3:a:vmware:telco_cloud_platform:5.0
-
cpe:2.3:a:vmware:telco_cloud_platform:5.0.1
-
cpe:2.3:a:vmware:telco_cloud_platform:5.0.2
-
cpe:2.3:a:vmware:telco_cloud_platform:5.1
-
cpe:2.3:a:vmware:vsphere_foundation:-
-
cpe:2.3:o:vmware:esxi:8.0
-
cpe:2.3:o:vmware:esxi:9.0.0
-
cpe:2.3:o:vmware:esxi:9.0.0.0100
-
cpe:2.3:o:vmware:esxi:9.0.1.0
-
cpe:2.3:o:vmware:esxi:9.0.2.0