China-Linked Hackers Exploited VMware ESX Zero-Day to Reduce Audit Trail Visibility

The U.S. Cybersecurity and Infrastructure Security Agency CISA on Wednesday added a security flaw impacting Broadcom VMware ESX to its Known Exploited Vulnerabilities KEV catalog, after CrowdStrike revealed that it had been weaponized by a China-nexus threat actor known as Warp Panda in attacks...

CISA Adds Two Known Exploited Vulnerabilities to Catalog

CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities KEV Catalog, based on evidence of active exploitation. CVE-2026-41709 Broadcom VMWare ESX Insufficient Logging Vulnerability CVE-2026-46300 Linux Kernel Missing Initialization of a Variable Vulnerability These types of...

Broadcom VMWare ESX Insufficient Logging Vulnerability

Broadcom VMWare ESX contains an insufficient logging vulnerability that could allow a malicious actor with admin access to perform certain operations without being logged...

CVE-2026-108311

Tanium addressed an insufficient logging vulnerability in Tanium Server...

CVE-2026-108311 Tanium addressed an insufficient logging vulnerability in Tanium Server.

Tanium addressed an insufficient logging vulnerability in Tanium Server...

EUVD-2026-111269

Tanium addressed an insufficient logging vulnerability in Tanium Server...

CVE-2026-108311

Tanium addressed an insufficient logging vulnerability (CWE-778) in Tanium Server . The vulnerability impacts the logging capabilities of the server, which could hinder the ability to monitor or audit specific actions. The base severity is rated as LOW with a CVSS score of 2.7, requiring high pri...

PT-2026-127161

Tanium addressed an insufficient logging vulnerability in Tanium Server...

VulnCheck KEV: CVE-2026-41709

Broadcom VMWare ESX contains an insufficient logging vulnerability that could allow a malicious actor with admin access to perform certain operations without being logged...

Tanium Server log information leakage vulnerability

Versions of Tanium Server prior to 7.7.3.8351, versions prior to 7.8.2.1263 for version 7.8.2, and versions prior to 7.8.4.1399 contain a log information leakage vulnerability caused by insufficient logging...

CVE-2026-108311: Insufficient Logging

Tanium addressed an insufficient logging vulnerability in Tanium Server...

Linux Distros Unpatched Vulnerability : CVE-2026-105243

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insufficient Logging vulnerability in the EventLogAppender of Apache log4net. Long messages were truncated to a fixed size that exceeds what the Windows Event L...

Insufficient Logging

Overview Affected versions of this package are vulnerable to Insufficient Logging due to improper audit logging in the sys/generate-root, sys/rekey, and sys/rekey-recovery-key endpoints when request audit logging succeeds but response audit logging fails. An attacker can hinder forensic detection...

Insufficient Logging

Overview Affected versions of this package are vulnerable to Insufficient Logging due to improper audit logging in the sys/generate-root, sys/rekey, and sys/rekey-recovery-key endpoints when request audit logging succeeds but response audit logging fails. An attacker can hinder forensic detection...

Insufficient Logging

Overview Affected versions of this package are vulnerable to Insufficient Logging due to improper audit logging in the sys/generate-root, sys/rekey, and sys/rekey-recovery-key endpoints when request audit logging succeeds but response audit logging fails. An attacker can hinder forensic detection...

Insufficient Logging

Overview Affected versions of this package are vulnerable to Insufficient Logging due to improper audit logging in the sys/generate-root, sys/rekey, and sys/rekey-recovery-key endpoints when request audit logging succeeds but response audit logging fails. An attacker can hinder forensic detection...

Insufficient Logging

Overview Affected versions of this package are vulnerable to Insufficient Logging due to improper audit logging in the sys/generate-root, sys/rekey, and sys/rekey-recovery-key endpoints when request audit logging succeeds but response audit logging fails. An attacker can hinder forensic detection...

Insufficient Logging

Overview Affected versions of this package are vulnerable to Insufficient Logging due to improper audit logging in the sys/generate-root, sys/rekey, and sys/rekey-recovery-key endpoints when request audit logging succeeds but response audit logging fails. An attacker can hinder forensic detection...

CVE-2026-85959

The Progress MarkLogic Server is impacted by CVE-2026-85959 , where versions 12.x before 12.1.0 and 11.x before 11.3.7 fail to consistently record successful authentication events in audit logs. This insufficient logging (CWE-778) can hinder the ability to detect or investigate unauthorized acces...

CVE-2026-85959: Insufficient Logging

Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 do not consistently record successful authentication events in audit logs, which could limit customers' ability to detect and investigate unauthorized access or credential misuse...