Broadcom · VMware ESX
Updated November 6, 2026
The ESX hypervisor fails to log certain privileged actions when performed by an administrator, creating an audit blind spot. Attackers with admin credentials can thus conduct malicious activities without trace.
Undetected creation of backdoors, VM migration, or configuration changes that could facilitate ransomware deployment or data exfiltration.
Apply the latest ESX patch that introduces comprehensive logging; enable external log aggregation and review audit policies for privileged actions.
More active vulnerabilities