China-Linked Hackers Exploited VMware ESX Zero-Day to Reduce Audit Trail Visibility
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added a security flaw impacting Broadcom VMware ESX to its Known Exploited Vulnerabilities (KEV) catalog, after CrowdStrike revealed that it had been weaponized by a China-nexus threat actor known as Warp Panda in attacks targeting the U.S. legal sector. The vulnerability in question is CVE-2026-41709 (CVSS score:
Get these alerts on XExploits, big breaches and outages, with what to do.
Follow @vulnpulse_app| CVE | CVE-2026-41709 |
|---|---|
| Source | The Hacker News |
| Fetched | 10/29/2026, 03:54 PM |
| Data | Markdown JSON |
On 10/29/2026, 03:22 PM, The Hacker News published "China-Linked Hackers Exploited VMware ESX Zero-Day to Reduce Audit Trail Visibility" (type: Security news). Severity is "Critical" (critical). Related technologies: VMware. CVE: CVE-2026-41709.