← CVE Intelligence

CVE-2026-41709

ESX insufficient logging vulnerability PUBLISHED

Description (CNA)

VMware ESX contains an insufficient logging vulnerability. A malicious administrator could exploit this issue to perform certain operations without them being logged.

Affected (CNA)

Vendor / productVersions
VMware / Cloud Foundationaffected 9.1.x.x; affected 9.0.x.x; affected 5.x before 5.2.4
VMware / vSphere Foundationaffected 9.1.x.x; affected 9.0.x.x
VMware / ESXaffected 9.1.x.x before ESXi-9.1.0.0-25370933; affected 9.0.x.x before ESXi-9.0.2.0100-25595025; affected 8.0 before ESXi80U3j-25429389
VMware / Telco Cloud Platformaffected 5.1.x; affected 5.0.x

CWE

CWE-778

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.