Analysis on rafaelpfister.ch

Vendor description

VMware ESX contains an insufficient logging vulnerability. A malicious administrator could exploit this issue to perform certain operations without them being logged.

Reference data

Vendor
VMware
Affected products
  • Cloud Foundation
  • vSphere Foundation
  • ESX
  • Telco Cloud Platform
CVSS 3.1
2.7 (LOW)
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N
Weakness type
CWE-778: Insufficient logging
Published
July 30, 2026
In KEV catalog since
October 28, 2026
US federal deadline
November 11, 2026

Official sources

← All vulnerabilities