CVE Catalog
CVE-2026-41709
LowCVSS 2.7Exploitation Probability (EPSS)
Low risk0.38%
31th percentile - higher than 31% of all known CVEs
Summary
VMware ESX contains an insufficient logging vulnerability. A malicious administrator could exploit this issue to perform certain operations without them being logged.
Risk Assessment
The risk is the inability to audit administrator actions, which may hinder detection of unauthorized or malicious activities in the VMware environment.
Recommendation
It is recommended to apply patches provided by VMware and implement additional monitoring and auditing mechanisms.
Original NVD description (English source)
VMware ESX contains an insufficient logging vulnerability. A malicious administrator could exploit this issue to perform certain operations without them being logged.