DeutschShown in its original language — a full translation is planned for a future version.
VMware Produkte: Mehrere Schwachstellen
view advisory published 2026-07-28
Ein Angreifer kann mehrere Schwachstellen in VMware ESXi, VMware vCenter Server, VMware Workstation und VMware Fusion ausnutzen, um einen Denial of Service zuverursachen, Informationen offenzulegen, Sicherheitsmaßnahmen zu umgehen und Code auszuführen.
01
describes (5)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-41709US | — | — | ||
VMware ESX contains an insufficient logging vulnerability. A malicious administrator could exploit this issue to perform certain operations without them being logged. | ||||
| CVE-2026-59310US | —OT critical | KEV | ||
VMware vCenter contains a directory traversal vulnerability in the Syslog server. A malicious actor with network access to vCenter may exploit this issue to execute arbitrary code. | ||||
| CVE-2026-59309US | — | — | ||
VMware vCenter contains an authentication bypass vulnerability in the VMware Directory Service. A malicious actor with network access to vCenter may exploit this issue to bypass au… | ||||
| CVE-2026-47876US | — | — | ||
VMware ESX contains an out-of-bounds write vulnerability in the VMXNET3 virtual network adapter. A malicious actor with local administrative privileges on a virtual machine with VM… | ||||
| CVE-2026-41703US | — | — | ||
VMware ESX, Workstation, and Fusion contain an out-of-bounds read vulnerability. A malicious actor with VM deployment privileges could trigger an out-of-bounds read, potentially le… | ||||
02
references
External citations — patches, advisories, analysis.
- Google Cloud Platform Security Bulletin GCP-2026-050 vom 2026-07-29external
- Google Cloud Platform Security Bulletin GCP-2026-051 vom 2026-07-31external
- QUIRSO Threat Research team vom 2026-08-10external
- VMware Security Advisory VMSA-2026-0006 vom 2026-07-28external
- WID-SEC-W-2026-2569 - CSAF Versionself
- WID-SEC-2026-2569 - Portal Versionself
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan