As cited
Copy frozen at (site build).
vulnerabilities
China-Linked Hackers Exploited VMware ESX Zero-Day to Reduce Audit Trail Visibility
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-41709, a vulnerability in Broadcom VMware ESX, to its Known Exploited Vulnerabilities (KEV) catalog on October 29, 2026. CrowdStrike disclosed that a China-linked threat actor tracked as Warp Panda had weaponized the flaw in attacks targeting the U.S. legal sector, using it to reduce audit trail visibility.
Why it matters: U.S. legal firms and organizations running VMware ESX must prioritize patching CVE-2026-41709 to prevent exploitation by state-linked actors seeking to evade detection and manipulation of audit logs.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
vulnerabilities
China-Linked Hackers Exploited VMware ESX Zero-Day to Reduce Audit Trail Visibility
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-41709, a vulnerability in Broadcom VMware ESX, to its Known Exploited Vulnerabilities (KEV) catalog on October 29, 2026. CrowdStrike disclosed that a China-linked threat actor tracked as Warp Panda had weaponized the flaw in attacks targeting the U.S. legal sector, using it to reduce audit trail visibility.
Why it matters: U.S. legal firms and organizations running VMware ESX must prioritize patching CVE-2026-41709 to prevent exploitation by state-linked actors seeking to evade detection and manipulation of audit logs.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
vulnerabilities
China-Linked Hackers Exploited VMware ESX Zero-Day to Reduce Audit Trail Visibility
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-41709, a vulnerability in Broadcom VMware ESX, to its Known Exploited Vulnerabilities (KEV) catalog on October 29, 2026. CrowdStrike disclosed that a China-linked threat actor tracked as Warp Panda had weaponized the flaw in attacks targeting the U.S. legal sector, using it to reduce audit trail visibility.
Why it matters: U.S. legal firms and organizations running VMware ESX must prioritize patching CVE-2026-41709 to prevent exploitation by state-linked actors seeking to evade detection and manipulation of audit logs.
- Source published
- First seen by Cybersecurity Tracker