ACT NOWExploited vulnerability
Broadcom VMware ESX
Broadcom VMWare ESX Insufficient Logging Vulnerability
What's happening and what to do
An attacker who already has admin access can carry out certain actions on the system without leaving a log entry, and this flaw is being actively exploited. Broadcom VMware ESX. Apply the vendor's mitigations or update now, and check for signs of compromise.
AI summary of the sources on this page. Regenerated when a source changes.
Signals over time
- 2026-10-28Added to CISA's Known Exploited Vulnerabilities catalog.
- 2026-11-03 21:55First seen here.
- 2026-11-11Federal patch deadline for US agencies.
Source text
Broadcom VMWare ESX contains an insufficient logging vulnerability that could allow a malicious actor with admin access to perform certain operations without being logged.