CVE-2026-41709

published 2026-07-30

CVE-2026-41709: VMware ESX contains an insufficient logging vulnerability. A malicious administrator could exploit this issue to perform certain operations without them being…

Priority P4 10 low 2.7 CVSS 3.1

AV N AC L PR H UI N S U C N I L A N

VMware ESX contains an insufficient logging vulnerability. A malicious administrator could exploit this issue to perform certain operations without them being logged.

Affected

10 ranges

Vendor	Product	Version range	Fixed in
vmware	cloud_foundation	—	—
vmware	cloud_foundation	—	—
vmware	cloud_foundation	>= 5.x < 5.2.4	5.2.4
vmware	esx	>= 8.0 < ESXi80U3j-25429389	ESXi80U3j-25429389
vmware	esx	>= 9.0.x.x < ESXi-9.0.2.0100-25595025	ESXi-9.0.2.0100-25595025
vmware	esx	>= 9.1.x.x < ESXi-9.1.0.0-25370933	ESXi-9.1.0.0-25370933
vmware	telco_cloud_platform	—	—
vmware	telco_cloud_platform	—	—
vmware	vsphere_foundation	—	—
vmware	vsphere_foundation	—	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-778