VMware · Broadcom · CISA KEV · Active Exploitation · Zero-Day
CVE-2026-41709: VMware ESX Logging Flaw Added to CISA KEV After Warp Panda Used It to Hide Activity
A VMware ESX logging flaw scored 2.7 out of 10 is now on CISA KEV. CrowdStrike says the China-nexus group Warp Panda used it as a zero-day to perform admin operations without being logged. Here is who is affected, the fixed builds, and what to do.