Vulnerabilities
CVE-2026-41709 allows attackers with administrative privileges to perform operations without being logged.
Hi, what are you looking for?
SecurityWeek
All posts tagged "VMware"
Vulnerabilities
The flaws could allow attackers with administrative access to a virtual machine to execute code on the host system.
Vulnerabilities
The flaws can be exploited for remote code execution, authentication bypass, and device takeover.
Vulnerabilities
Tracked as CVE-2026–59310, the directory traversal bug allows remote attackers to execute arbitrary code.
Vulnerabilities
A total of five vulnerabilities have been patched in VMware ESXi, vCenter, Workstation, and Fusion.
Vulnerabilities
The flaws can be exploited for authentication bypass, remote code execution, privilege escalation, and directory traversal.
Vulnerabilities
The patch was announced as Broadcom is attending the Pwn2Own hacking competition in Berlin this week.
Vulnerabilities
The recently patched CVE-2026-22719 can be exploited by an unauthenticated attacker for remote code execution.
Vulnerabilities
Broadcom has patched several vulnerabilities in VMware Aria Operations, including high-severity flaws.
Vulnerabilities
The critical-severity vulnerability can be exploited via crafted network packets for remote code execution.
Vulnerabilities
Fresh attacks targeted three VMware ESXi vulnerabilities that were disclosed in March 2025 as zero-days.
Vulnerabilities
Broadcom has updated its advisory on CVE-2025-41244 to mention the vulnerability’s in-the-wild exploitation.
Vulnerabilities
Impacting VMware Aria Operations and VMware Tools, the flaw can be exploited to elevate privileges on the VM.
Vulnerabilities
The flaws could allow attackers to escalate privileges, manipulate notifications, and enumerate usernames.
Cybercrime
The financially motivated group is pivoting from Active Directory to VMware vSphere environments, deploying ransomware from the hypervisor.
Network Security
Chinese cyberespionage group Fire Ant is targeting virtualization and networking infrastructure to access isolated environments.
Vulnerabilities
Four CVEs disclosed at the Pwn2Own Berlin 2025 hacking competition have been patched in VMware products.
Cloud Security
VMware patches flaws that expose users to data leakage, command execution and denial-of-service attacks. No temporary workarounds available.
Vulnerabilities
Juniper Networks, VMware, and Zoom have announced patches for dozens of vulnerabilities across their products.
Vulnerabilities
Ivanti, VMware, and Zoom released fixes for dozens of vulnerabilities in their products on April 2025 Patch Tuesday.
Cybercrime
The FBI has officially pinned the $6 billion Binance hack on North Korea’s TraderTraitor as the attackers launder the stolen crypto.
Malware & Threats
Vulnerabilities
Funding/M&A
Significant cybersecurity deals were announced by Absolute Security, Aikido, Anthropic, Cohere, Hex-Rays, and Proofpoint.
Data Breaches
Cloud Security
