VMWare Products Multiple Vulnerabilities
CSIRTS triage
- What
- Multiple unspecified vulnerabilities in VMware products.
- Who is affected
- VMware product deployments of unknown versions.
- Urgency
- Severity and exploitability unknown; further details required to assess urgency.
- Action
- Review VMware security advisories for affected products and versions, then apply available patches.
AI-assisted analysis generated from the source advisory — verify against the original.
Details
Original advisory: https://www.hkcert.org/security-bulletin/vmware-products-multiple-vulnerabilities_20260814
Exploitation outlook
EPSS (FIRST.org) estimates each CVE’s probability of exploitation in the next 30 days — here is the CSIRTS.com read on those numbers.
- Low exploitation riskCVE-2026-417030.56% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 44% of all EPSS-scored CVEs.
- Low exploitation riskCVE-2026-417090.38% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 31% of all EPSS-scored CVEs.
- Low exploitation riskCVE-2026-478760.28% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 21% of all EPSS-scored CVEs.
- Low exploitation riskCVE-2026-593090.74% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 52% of all EPSS-scored CVEs.
- Moderate exploitation riskCVE-2026-593101.1% 30-day exploitation probability. Patch within normal cadence, watch for KEV listing. Riskier than 64% of all EPSS-scored CVEs.
Referenced CVEs
| CVE | CSIRTS overview | External |
|---|---|---|
| CVE-2026-41703 | coverage & exploitation status | NVD · CVE.org |
| CVE-2026-41709 | coverage & exploitation status | NVD · CVE.org |
| CVE-2026-47876 | coverage & exploitation status | NVD · CVE.org |
| CVE-2026-59309 | coverage & exploitation status | NVD · CVE.org |
| CVE-2026-59310 | coverage & exploitation status | NVD · CVE.org |
Same CVEs, other sources
How other CERTs, PSIRTs and databases cover the vulnerabilities in this advisory.
- high[NEW] [high] VMware Products: Multiple vulnerabilitiescert-bund
- unknownVMware security advisory (AV26-763)cccs
- lowCVE-2026-41709: VMware ESX contains an insufficient logging vulnerability. A malicious administrator could exp…nvd
- criticalCVE-2026-59310: VMware vCenter contains a directory traversal vulnerability in the Syslog server. A malicious …nvd
- criticalCVE-2026-59309: VMware vCenter contains an authentication bypass vulnerability in the VMware Directory Service…nvd
- criticalCVE-2026-47876: VMware ESX contains an out-of-bounds write vulnerability in the VMXNET3 virtual network adapte…nvd
- highCVE-2026-41703: VMware ESX, Workstation, and Fusion contain an out-of-bounds read vulnerability. A malicious a…nvd
- unknownMultiple Vulnerabilities in VMware Products (July 30, 2026)cert-fr-avis
- unknownNCSC-2026-0269 [1.01] [M/H] Vulnerabilities fixed in VMware productsncsc-nl
More from HKCERT Security Bulletins
- unknownMicrosoft Edge Multiple Vulnerabilities2026-08-17
- unknownPalo Alto Products Multiple Vulnerabilities2026-08-14
- unknownIBM WebSphere Products Multiple Vulnerabilities2026-08-13
- unknownMongoDB Multiple Vulnerabilities2026-08-13
- unknownFortinet Products Multiple Vulnerabilities2026-08-13