Photon OS 5.0: Nss PHSA-2026-5.0-92-0965

An update of the nss package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-92-0965. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Go PHSA-2026-5.0-91-0960

An update of the go package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-91-0960. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Critical macOS, SharePoint, vCenter, and Microsoft IKE Flaws Under Active Exploitation

The U.S. Cybersecurity and Infrastructure Security Agency CISA on Tuesday added four critical vulnerabilities to its Known Exploited Vulnerabilities KEV catalog, stating they are being exploited in the wild. The shortcomings added to the KEV catalog are listed below - CVE-2026-65400 CVSS score: 9...

VMware vCenter Server 8.0 < 8.0 U3k / 9.0.x < 9.0.2.0100 / 9.1.x < 9.1.0.0200 Authentication Bypass (VMSA-2026-0006)

The version of VMware vCenter Server installed on the remote host is 8.0 prior to 8.0 Update 3k, or 9.0.x prior to 9.0.2.0100, or 9.1.x prior to 9.1.0.0200. It is, therefore, affected by a vulnerability as referenced in the VMSA-2026-0006.1 advisory: - VMware vCenter contains an authentication...

VMware ESX 8.0 / 9.0 / 9.1 Insufficient Logging (VMSA-2026-0006)

The version of VMware ESX installed on the remote host is 8.0 prior to build 25429389 8.0 Update 3j, or 9.0 prior to build 25595025 9.0.2.0100, or 9.1 prior to build 25370933 9.1.0.0. It is, therefore, affected by a vulnerability as referenced in the VMSA-2026-0006.1 advisory: - VMware ESX contai...

VMware Fusion 25.x < 26.0.0 Information Disclosure (VMSA-2026-0006)

The version of VMware Fusion installed on the remote macOS host is 25.x 25H2 prior to 26.0.0 26H1. It is, therefore, affected by a vulnerability as referenced in the VMSA-2026-0006.1 advisory: - VMware ESX, Workstation, and Fusion contain an out-of-bounds read vulnerability. A malicious actor wit...

VMware ESX 8.0 / 9.0 / 9.1 Out-of-Bounds Read (VMSA-2026-0006)

The version of VMware ESX installed on the remote host is 8.0 prior to build 25205845 8.0 Update 3i, or 9.0 prior to build 25595025 9.0.2.0100, or 9.1 prior to build 25370933 9.1.0.0. It is, therefore, affected by a vulnerability as referenced in the VMSA-2026-0006.1 advisory: - VMware ESX,...

Broadcom VMware vCenter Path Traversal Vulnerability

Broadcom VMware vCenter contains a path traversal vulnerability which could allow a threat actor with network access to vCenter to execute arbitrary code...

VMware ESX 8.0 / 9.0 / 9.1 Out-of-Bounds Write (VMSA-2026-0006)

The version of VMware ESX installed on the remote host is 8.0 prior to build 25595708 8.0 Update 3k, or 9.0 prior to build 25595025 9.0.2.0100, or 9.1 prior to build 25557999 9.1.0.0200. It is, therefore, affected by a vulnerability as referenced in the VMSA-2026-0006.1 advisory: - VMware ESX...

⚡ Weekly Recap: VMware Exploits, Windows 0-Day, MCP Attacks, Browser Hijacks and More

The expensive attacks are not always the clever ones. This week had plenty of proof. Exposed services got hit, old bugs found fresh use, browser sessions became attack paths, and supply-chain problems kept spreading farther than the original compromise. A lot of it came down to access that was...

Suspected China-Nexus Actor Exploits VMware vCenter Flaw, Deploys Babuk-Derived Ransomware

Cybersecurity researchers have attributed the exploitation of a newly patched security flaw in Broadcom VMware vCenter to a suspected China-nexus advanced persistent threat APT. The attacks involve the exploitation of CVE-2026-59310 CVSS score: 9.8, a severe directory-traversal vulnerability in t...

VulnCheck KEV: CVE-2026-59309

VMware vCenter contains an authentication bypass vulnerability in the VMware Directory Service. A malicious actor with network access to vCenter may exploit this issue to bypass authentication and gain unauthorized access to the system...

VMware Workstation/Fusion NAT vulnerability: a guest VM admin can disrupt or intercept other guest VMs' network connections

VMware Workstation/Fusion NAT Network Packet Management Flaw Allows a Guest VM to Disrupt or Intercept Other Guest VMs' Network Connections CVE-2026-22715 Vulnerability Overview VMware Workstation and Fusion contain a logic flaw CWE-923, communication channel not correctly restricted to intended...

Attackers Exploit VMware vCenter Vulnerability to Gain Persistent Remote Access

Threat actors have begun to actively exploit a recently patched critical security flaw in Broadcom VMware vCenter, according to new findings from QUIRSO. The vulnerability in question is CVE-2026-59310 CVSS score: 9.8, a directory-traversal vulnerability in the VMware vCenter server that a...

Photon OS 5.0: Protobuf PHSA-2026-5.0-92-0949

An update of the protobuf package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-92-0949. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

GHSA-QHVV-4MW5-PXH3 vulnerabilities

Vulnerabilities for packages: linux-gcp, linux-azure, linux-aws, linux-qemu, linux-vmware...

VulnCheck KEV: CVE-2026-59310

Broadcom VMware vCenter contains a path traversal vulnerability which could allow a threat actor with network access to vCenter to execute arbitrary code...

Photon OS 5.0: Linux PHSA-2026-5.0-92-0761

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-92-0761. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Rubygem PHSA-2024-5.0-91-0432

An update of the rubygem package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-5.0-91-0432. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

The vulnerability of the Syslog Server server, a management tool for virtual infrastructure in VMware vCenter Server, allows a attacker to execute arbitrary code.

The vulnerability of the Syslog Server server used in managing the virtual infrastructure of VMware vCenter Server is related to an incorrect limitation on the path name to the directory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...