Back to Fastnexa
Under attack?
CyberBrief
Subscribe
Fastnexa

VMware security advisory (AV26-763) – Update 2

Used in attacksCriticalCVSS 9.8Canadian Centre for Cyber Security · Canadian Centre for Cyber Security·

At a glance

Severity
CriticalCVSS 9.8
Used in attacks
Yes, 2 of 3 flaws named
Flaws named
CVE-2026-59310CVE-2026-59309CVE-2026-41709
Vendors and products
VMware
Industries
Government
Reported by
1 outlet

As of July 30, 2026, VMware is affected by vulnerabilities in the following products:

  • Cloud Foundation
    • 5.x
    • 9.0.x.x
    • 9.1.x.x
    • Prior to 5.2.3
  • ESX
    • Prior to ESXi-9.0.2.0100-25595025
    • Prior to ESXi-9.1.0.0-25370933
    • Prior to ESXi-9.1.0.0200-25557999
    • Prior to ESXi80U3i-25205845
    • Prior to ESXi80U3k-25595708
  • Fusion
    • Prior to 26H1
  • Telco Cloud Infrastructure
    • 3.0
  • Telco Cloud Platform
    • 4.x
    • 5.0.x
    • 5.1.x
  • Workstation
    • Prior to 26H1
  • vCenter
    • Prior to 8.0 U3k
    • Prior to 9.0.2.0100
    • Prior to 9.1.0.0300
  • vSphere Foundation
    • 9.0.x.x
    • 9.1.x.x

Update 2

On October 28, 2026, Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-41709 to their Known Exploited Vulnerabilities (KEV) Database.

Update 1

On August 18, 2026, Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-59310 to their Known Exploited Vulnerabilities (KEV) Database.

The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.

Originally published by Canadian Centre for Cyber Security. © Canadian Centre for Cyber Security. Written by Canadian Centre for Cyber Security.

Read at cyber.gc.ca ↗Official Source

Vulnerabilities referenced

  • CVE-2026-59310Not scored yet

    Broadcom VMware vCenter

    Broadcom VMware vCenter contains a path traversal vulnerability which could allow a threat actor with network access to vCenter to execute arbitrary code.

    Used in attacksUsed by ransomware gangs

    Added to CISA's list 2026-08-18

    Full record →
  • CVE-2026-593099.8Critical

    Vmware Vcenter Server

    VMware vCenter contains an authentication bypass vulnerability in the VMware Directory Service. A malicious actor with network access to vCenter may exploit this issue to bypass authentication and gain unauthorized access to the system.

    Patch or advisory available

    Full record →
  • CVE-2026-41709Not scored yet

    Broadcom VMware ESX

    Broadcom VMWare ESX contains an insufficient logging vulnerability that could allow a malicious actor with admin access to perform certain operations without being logged.

    Used in attacks

    Added to CISA's list 2026-10-28

    Full record →

Fastnexa security experts

This story involves a flaw attackers are already using. Are you exposed?

A Fastnexa penetration tester can check whether CVE-2026-59310, CVE-2026-41709 or anything like them can be used against your websites, apps and network.

Book a 30-min callWhatsApp us

Think you’ve already been hit? Don’t wait on a form: call or WhatsApp +1 (732) 454 2616. We reply within 1 hour, 24/7. Emergency help →

Coverage

One outlet has carried this so far.

  1. Canadian Centre for Cyber Security ↗Official SourceFirst reported

    2026-10-28 19:53 UTC

Related stories