p PatchFirst

CVE-2026-41709

CVE-2026-41709 · ESX insufficient logging vulnerability

This page contains facts from public vulnerability sources. Check the original advisory before updating.

VMware ESX contains an insufficient logging vulnerability. A malicious administrator could exploit this issue to perform certain operations without them being logged.

CVSS 2.7 · Low · EPSS 0.7% · In KEV · Fix available

Published
Updated

Affected products and versions

  • cloud foundation

    Versions
    • 9.1.x.x: Affected
    • 9.0.x.x: Affected
    • ≥ 5.x, < 5.2.4: Affected (custom)

    Update to 5.2.4

  • vsphere foundation

    Versions
    • 9.1.x.x: Affected
    • 9.0.x.x: Affected

    No fix published

  • esx

    Versions
    • ≥ 9.1.x.x, < ESXi-9.1.0.0-25370933: Affected (custom)
    • ≥ 9.0.x.x, < ESXi-9.0.2.0100-25595025: Affected (custom)
    • ≥ 8.0, < ESXi80U3j-25429389: Affected (custom)

    No fix published

  • telco cloud platform

    Versions
    • 5.1.x: Affected
    • 5.0.x: Affected

    No fix published

Original sources

Check your server →