CVE-2026-417092.7LowCWE-778
ESX insufficient logging vulnerability
VMware · Cloud Foundation
Not in CISA KEVVendor fix available
0.3%probability of exploitation in the next 30 days
22nd percentile
050100
Higher than 22% of scored CVEs
2.7LowCVSS 3.1
LowMediumHighCrit.
DescriptionNVD
VMware ESX contains an insufficient logging vulnerability. A malicious administrator could exploit this issue to perform certain operations without them being logged.
Coverage2 articles · 2 outlets
One row per outlet, in order of first report. First in our coverage: SecurityWeek, 29 Jul.
Quiet for 13 weekslast report 29 Jul2 articles2 outlets
- Wed 29 Jul, 11:51 UTC. SecurityWeek, first report. Broadcom Warns of VMware Flaws Allowing Host Code Execution.
- Wed 29 Jul, 14:07 UTC. Security Affairs, its first report on the story. Broadcom patches critical VMware flaws, including admin VM escape.
- First report
- Article
- Running total
Show as tableHide table
| Published (UTC) | Outlet | Headline |
|---|---|---|
| 29 Jul 11:51 | SecurityWeek | Broadcom Warns of VMware Flaws Allowing Host Code Execution |
| 29 Jul 14:07 | Security Affairs | Broadcom patches critical VMware flaws, including admin VM escape |
- Broadcom patches critical VMware flaws, including admin VM escapeSecurity Affairs · mentions it in passing
- Broadcom Warns of VMware Flaws Allowing Host Code ExecutionSecurityWeek · first in our coverage · mentions it in passing
New articles also arrive in the RSS feed.