The Hacker Newsinfo@thehackernews.com (The Hacker News)
VMware bugs allow authentication bypass and VM escape
Part of the VMware story · since 16 Jul
Quiet for 11 weekslast report 12 Aug9 articles6 outlets
- Thu 16 Jul, 11:10 UTC. Malwarebytes, first report. Adobe, Chrome, Firefox, VMware and Zoom patch critical flaws.
- Wed 29 Jul, 11:51 UTC. SecurityOnline, its first report on the story. Critical VMware vCenter flaw lets hackers bypass authentication.
- Wed 29 Jul, 11:51 UTC. SecurityWeek, its first report on the story. Broadcom Warns of VMware Flaws Allowing Host Code Execution.
- Wed 29 Jul, 14:07 UTC. Security Affairs, its first report on the story. Broadcom patches critical VMware flaws, including admin VM escape.
- Wed 29 Jul, 15:51 UTC. The Hacker News, its first report on the story. VMware bugs allow authentication bypass and VM escape. This article, 5th of 9.
- Thu 30 Jul, 13:01 UTC. Rapid7, its first report on the story. Patch now: critical VMware vCenter remote code flaws.
- Mon 3 Aug, 03:01 UTC. SecurityOnline. Attackers Exploit VMware, WordPress Zero Days in New CVE Wave. Cites a CVE in CISA KEV.
- Wed 12 Aug, 10:21 UTC. The Hacker News. VMware vCenter flaw lets hackers maintain persistent access.
- Wed 12 Aug, 15:19 UTC. SecurityOnline. Dell VSI flaw CVE-2026-67261 lets attackers run code remotely.
The article discusses three critical vulnerabilities found in VMware software that could allow unauthorized authentication bypass, code execution, and VM escape. Exploiting these flaws could enable attackers to gain full access to the host system and other virtual machines. Institutions using affected versions of VMware products are advised to apply provided patches and updates urgently to mitigate risks.
How the story developed
Quiet for 11 weekslast report 12 Aug9 articles6 outlets
9 articles from 6 outlets since 16 Jul. Quiet since 12 Aug. This was the 5th report, 13 days after the first.
- Thu 16 Jul, 11:10 UTC. Malwarebytes, first report. Adobe, Chrome, Firefox, VMware and Zoom patch critical flaws.
- Wed 29 Jul, 11:51 UTC. SecurityOnline, its first report on the story. Critical VMware vCenter flaw lets hackers bypass authentication.
- Wed 29 Jul, 11:51 UTC. SecurityWeek, its first report on the story. Broadcom Warns of VMware Flaws Allowing Host Code Execution.
- Wed 29 Jul, 14:07 UTC. Security Affairs, its first report on the story. Broadcom patches critical VMware flaws, including admin VM escape.
- Wed 29 Jul, 15:51 UTC. The Hacker News, its first report on the story. VMware bugs allow authentication bypass and VM escape. This article, 5th of 9.
- Thu 30 Jul, 13:01 UTC. Rapid7, its first report on the story. Patch now: critical VMware vCenter remote code flaws.
- Mon 3 Aug, 03:01 UTC. SecurityOnline. Attackers Exploit VMware, WordPress Zero Days in New CVE Wave. Cites a CVE in CISA KEV.
- Wed 12 Aug, 10:21 UTC. The Hacker News. VMware vCenter flaw lets hackers maintain persistent access.
- Wed 12 Aug, 15:19 UTC. SecurityOnline. Dell VSI flaw CVE-2026-67261 lets attackers run code remotely.
- Known exploited CVE
- CVE not in KEV
- No CVE
- Larger: an outlet’s first report
- Coverage over time
- Quiet time, folded
Show all 9 articles as a listHide the list
- Thu 16 JulDay 01
- Adobe, Chrome, Firefox, VMware and Zoom patch critical flaws11:10 · Malwarebytes · First report
Quiet for 13 days
Wed 29 JulDay 134- Critical VMware vCenter flaw lets hackers bypass authentication11:51 · SecurityOnline · Picked up again
- Broadcom Warns of VMware Flaws Allowing Host Code Execution11:51 · SecurityWeek
- Broadcom patches critical VMware flaws, including admin VM escape14:07 · Security Affairs
- VMware bugs allow authentication bypass and VM escape15:51 · The Hacker News · This article, 5th of 9
- Thu 30 JulDay 141
- Patch now: critical VMware vCenter remote code flaws13:01 · Rapid7
Quiet for 4 days
Mon 3 AugDay 181- Attackers Exploit VMware, WordPress Zero Days in New CVE Wave03:01 · SecurityOnline · Exploited CVE · Picked up again · Known exploited CVE
Quiet for 9 days
Wed 12 AugDay 272- VMware vCenter flaw lets hackers maintain persistent access10:21 · The Hacker News · Picked up again
- Dell VSI flaw CVE-2026-67261 lets attackers run code remotely15:19 · SecurityOnline