Skip to content
Sign in

VMware product

Cloud Foundation

Alert
No Cloud Foundation CVE is in the CISA KEV catalogue.

Tracked since 29 Jul · latest article 5 Sep · RSS · API

0Open KEV deadlines

None open

0Added to KEV · 90 days

of 0 in the full CISA catalogue · all time

0High exploit odds · current

EPSS top 5%, not in KEV

0Articles · 7 days

none this week

Exploited, by due date

No Cloud Foundation CVE is in the CISA KEV catalogue.

Patch cadence and exploit odds

How often CISA adds Cloud Foundation CVEs, how many have a fix, and where their exploit odds sit.

Added to CISA KEV per quarter

CISA has not added a Cloud Foundation CVE to KEV.

Fix listed

4 of 4 CVEs in coverage

Every CVE in coverage has a fix recorded.

EPSS percentile of each CVE

One dot per CVE; a red diamond marks those in CISA KEV.

top 5%CVE-2026-59309: 49th percentileCVE-2026-41703: 37.4th percentileCVE-2026-41709: 22.2th percentileCVE-2026-47876: 8.8th percentile050100
Show as table
FIRST EPSS percentiles across CVEs in coverage
CVEEPSS percentile
CVE-2026-5930949
CVE-2026-4170337.4
CVE-2026-4170922.2
CVE-2026-478768.8

Coverage5 articles · all time

The latest 5 articles naming Cloud Foundation, in the shared story grammar.

Full timeline
Quiet for 7 weekslast report 5 Sep5 articles5 outlets

5 articles from 5 outlets since 29 Jul. Quiet since 5 Sep.

Now29 Jul30315 Sep627 OctFirst reportSecurityOnline · 29 Jul, 11:51Picked up againafter 5 weeks quiet
  • Wed 29 Jul, 11:51 UTC. SecurityOnline, first report. Critical VMware vCenter flaw lets hackers bypass authentication.
  • Wed 29 Jul, 11:51 UTC. SecurityWeek, its first report on the story. Broadcom Warns of VMware Flaws Allowing Host Code Execution.
  • Wed 29 Jul, 14:07 UTC. Security Affairs, its first report on the story. Broadcom patches critical VMware flaws, including admin VM escape.
  • Thu 30 Jul, 13:01 UTC. Rapid7, its first report on the story. Patch now: critical VMware vCenter remote code flaws.
  • Sat 5 Sep, 17:01 UTC. The Hacker News, its first report on the story. Broadcom Patches Critical VMware Flaws Enabling VM-to-Host Code Execution.
  • CVE not in KEV
  • No CVE
  • Larger: an outlet’s first report
  • Coverage over time
  • Quiet time, folded
Show all 5 articles as a list
  1. Wed 29 JulDay 03
    1. Critical VMware vCenter flaw lets hackers bypass authentication11:51 · SecurityOnline · First report
    2. Broadcom Warns of VMware Flaws Allowing Host Code Execution11:51 · SecurityWeek
    3. Broadcom patches critical VMware flaws, including admin VM escape14:07 · Security Affairs
  2. Thu 30 JulDay 11
    1. Patch now: critical VMware vCenter remote code flaws13:01 · Rapid7

  3. Quiet for 5 weeks

    Sat 5 SepDay 381
    1. Broadcom Patches Critical VMware Flaws Enabling VM-to-Host Code Execution17:01 · The Hacker News · Picked up again

All CVEs in coverage4

Exploited first, then by EPSS

In the CVE tracker
  • CVE-2026-59309

    vCenter authentication-bypass vulnerability

    9.8Critical0.6% EPSS · 5 articles
  • CVE-2026-41703

    Out-of-bounds read vulnerability

    7.6High0.4% EPSS · 2 articles
  • CVE-2026-41709

    ESX insufficient logging vulnerability

    2.7Low0.3% EPSS · 2 articles
  • CVE-2026-47876

    VMXNET3 out-of-bounds write vulnerability

    9.3Critical0.2% EPSS · 2 articles
CyberSIXTSignal over noise
Updated AboutDevelopersSign in