CVE Tools
Track your stack

Critical VM Escape Vulnerability Patched in VMware ESXi

SecurityWeekBy Eduard Kovacs

PatchESXivCenter

Our summary

Broadcom has issued a security update addressing multiple vulnerabilities in VMware products, including a critical VM escape flaw tracked as CVE-2026-47876. This vulnerability affects the VMXNET3 virtual network adapter in ESXi and could allow an attacker with local admin access to run arbitrary code on the host system. Other critical issues include a vCenter authentication bypass (CVE-2026-59309) and remote code execution (CVE-2026-59310). Broadcom says no active exploitation has been observed yet, but urges users to apply the latest patches promptly.

Read at SecurityWeek

SecurityWeek publishes this story on its own site; we link to it rather than reprint it.

  1. BleepingComputerVMware fixes three critical flaws allowing auth bypass, VM escapesCVE-2026-41703, CVE-2026-41709 +3
  2. The Hacker NewsThree Critical VMware Flaws Allow Auth Bypass, Code Execution, and VM EscapeCVE-2026-41703, CVE-2026-41709 +3
  3. The Hacker NewsCritical VMware Workstation and Fusion Flaw Lets VM Admins Execute Host CodeCVE-2026-59309, CVE-2026-59310
  4. The Hacker NewsSuspected China-Nexus Actor Exploits VMware vCenter Flaw, Deploys Babuk-Derived RansomwareCVE-2026-59309, CVE-2026-59310
  5. The Hacker NewsAttackers Exploit VMware vCenter Vulnerability to Gain Persistent Remote AccessCVE-2026-59309, CVE-2026-59310
  6. Check Point Research3rd August – Threat Intelligence ReportCVE-2026-59309, CVE-2026-59310
  7. Rapid7 BlogCritical VMware vCenter Vulnerabilities Allow Authentication Bypass and Remote Code Execution (CVE-2026-59309, CVE-2026-59310)CVE-2026-59309, CVE-2026-59310
  8. The Hacker NewsThreatsDay: Self-Rewriting Agents, 800+ Flaws Patched, Insider SIM Swaps and 22 More New StoriesCVE-2026-59310
  9. BleepingComputerCISA: Critical VMware RCE flaw now exploited by ransomware gangsCVE-2026-59310
  10. The Hacker NewsCritical macOS, SharePoint, vCenter, and Microsoft IKE Flaws Under Active ExploitationCVE-2026-59310

Worried this affects your company?

Discuss a security assessment of your internet-facing systems. Scope agreed before testing.

Check my exposure

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store