CERT24Chinese Hackers Quietly Used a Low-Severity ESXi Logging Flaw as a Zero-DayLoading data…
CERT24Threat Observatory
Period

Chinese Hackers Quietly Used a Low-Severity ESXi Logging Flaw as a Zero-Day

The US cybersecurity agency CISA reported that attackers have exploited VMware ESXi vulnerability CVE-2026-41709. The flaw is an insufficient-logging issue that allows attackers logged in as administrators to perform certain operations without those operations being logged.

← Back to intelligence

Chinese Hackers Quietly Used a Low-Severity ESXi Logging Flaw as a Zero-Day

The US cybersecurity agency CISA reported that attackers have exploited VMware ESXi vulnerability CVE-2026-41709. The flaw is an insufficient-logging issue that allows attackers logged in as administrators to perform certain operations without those operations being logged.