High Threat Security Alert (A26-07-50): Multiple Vulnerabilities in VMware Products

Description:

VMware has published a security advisory to address multiple vulnerabilities in VMware Products. The details of patches can be found at:
https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/38017

Reports indicated that a remote code execution vulnerability (CVE-2026-59310) is being exploited in the wild. System administrators are advised to take immediate action to patch affected systems to mitigate the elevated risk of cyber attacks.

Affected Systems:

• VMware Cloud Foundation
• VMware ESX
• VMware Fusion
• VMware Telco Cloud Infrastructure
• VMware Telco Cloud Platform
• VMware vCenter
• VMware vSphere Foundation
• VMware Workstation

For detailed information of the affected systems, please refer to the corresponding security advisories at vendor's website.

Impact:

Depending on the vulnerabilities being exploited, a successful exploitation could lead to remote code execution, denial of service, information disclosure, security restriction bypass or tampering on an affected system.

Recommendation:

Patches for affected systems are available. System administrators of affected systems should follow the recommendations provided by the vendor and take immediate actions to mitigate the risk.

More Information:

• https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/38017
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-41703
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-41709
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-47876
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59309 (to CVE-2026-59310)