{"basis":"claimed","id":"CVE-2026-41709","name":"Broadcom VMWare ESX Insufficient Logging Vulnerability","vendorProject":"Broadcom","product":"VMware ESX","publishedAt":"2026-07-30","cvss":{"score":2.7,"severity":"LOW","version":"3.1"},"exploited":{"kevAdded":"2026-10-28","dueDate":"2026-11-11","ransomware":false},"epss":{"score":0.00689,"percentile":0.52738,"date":"2026-11-02"},"coverage":{"cloudflare":{"status":"none","firstOn":null,"daysToRule":null},"aws":{"status":"none","firstOn":null,"daysToRule":null},"azure":{"status":"none","firstOn":null,"daysToRule":null},"google":{"status":"none","firstOn":null,"daysToRule":null},"fastly":{"status":"no_history","firstOn":null,"daysToRule":null},"f5":{"status":"none","firstOn":null,"daysToRule":null},"akamai":{"status":"no_source","firstOn":null,"daysToRule":null},"crs":{"status":"none","firstOn":null,"daysToRule":null}},"title":"ESX insufficient logging vulnerability","description":"VMware ESX contains an insufficient logging vulnerability. A malicious administrator could exploit this issue to perform certain operations without them being logged.","cwes":["CWE-778"],"vendors":[{"vendor":"cloudflare","status":"none","basis":"claimed","firstOn":null,"firstIsNew":false,"daysToRule":null,"daysAtMost":null,"freePlan":false,"claims":[]},{"vendor":"aws","status":"none","basis":"claimed","firstOn":null,"firstIsNew":false,"daysToRule":null,"daysAtMost":null,"freePlan":false,"claims":[]},{"vendor":"azure","status":"none","basis":"claimed","firstOn":null,"firstIsNew":false,"daysToRule":null,"daysAtMost":null,"freePlan":false,"claims":[]},{"vendor":"google","status":"none","basis":"claimed","firstOn":null,"firstIsNew":false,"daysToRule":null,"daysAtMost":null,"freePlan":false,"claims":[]},{"vendor":"fastly","status":"no_history","basis":"claimed","firstOn":null,"firstIsNew":false,"daysToRule":null,"daysAtMost":null,"freePlan":false,"claims":[]},{"vendor":"f5","status":"none","basis":"claimed","firstOn":null,"firstIsNew":false,"daysToRule":null,"daysAtMost":null,"freePlan":false,"claims":[]},{"vendor":"akamai","status":"no_source","basis":"claimed","firstOn":null,"firstIsNew":false,"daysToRule":null,"daysAtMost":null,"freePlan":false,"claims":[]},{"vendor":"crs","status":"none","basis":"claimed","firstOn":null,"firstIsNew":false,"daysToRule":null,"daysAtMost":null,"freePlan":false,"claims":[]}],"updatedAt":"2026-11-02T22:17:38.477Z","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N","ssvc":{"exploitation":"active","automatable":"no","technicalImpact":"partial"},"measured":[],"social":{"total":2,"first_seen":"2026-11-02T22:55:32.000Z","daily":[{"day":"2026-10-20","posts":0},{"day":"2026-10-21","posts":0},{"day":"2026-10-22","posts":0},{"day":"2026-10-23","posts":0},{"day":"2026-10-24","posts":0},{"day":"2026-10-25","posts":0},{"day":"2026-10-26","posts":0},{"day":"2026-10-27","posts":0},{"day":"2026-10-28","posts":0},{"day":"2026-10-29","posts":0},{"day":"2026-10-30","posts":0},{"day":"2026-10-31","posts":0},{"day":"2026-11-01","posts":0},{"day":"2026-11-02","posts":2}],"top_posts":[{"source":"x","kind":"post","url":"https://x.com/EvergreenCS117/status/2117390388415824235","author":"EvergreenCS117","author_name":"Evergreen Cyber Security","avatar_url":"https://pbs.twimg.com/profile_images/2116231423174782976/a4pCwsif_bigger.jpg","text":"Low CVSS score, real attacks. VMware ESXi CVE-2026-41709 (2.7) is on CISA's exploited list: it lets an ESXi admin act without being logged. CrowdStrike says Warp Panda used it at US orgs, incl. law firms. Patch, and send logs off-host.\n\n#infosec https://t.co/L75GJo4uc3","engagement":0,"posted_at":"2026-11-02T22:56:22.000Z"},{"source":"x","kind":"post","url":"https://x.com/DSBriefing/status/2117390177635061836","author":"DSBriefing","author_name":"Data Security Briefing","avatar_url":"https://pbs.twimg.com/profile_images/2115428477532815360/g6_F5pgp_bigger.jpg","text":"VMware ESX: CVE-2026-41709 entrou no KEV da CISA. A falha deixa operações de admin sem registro e foi usada como zero-day pelo Warp Panda. Prazo federal 11/11.\n\nBriefing completo: https://t.co/QFLa1oIV2U\n\n#KEV #VMware #DSB","engagement":0,"posted_at":"2026-11-02T22:55:32.000Z"}],"exploit_repositories":[]}}