CVE-2026-41709
Low · 2.7 CISA KEVCVSS
2.7
EPSS
0.7%
Published
Jul 30, 2026
CISA due date
Nov 11, 2026
The record
VMware ESX contains an insufficient logging vulnerability. A malicious administrator could exploit this issue to perform certain operations without them being logged.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-108311 Tanium addressed an insufficient logging vulnerability in Tanium Server. CWE-778
- CVE-2026-115357 OpenBao before 2.6.4 and 2.7.x before 2.7.1 fails to write response audit entries for the… CWE-778
- CVE-2020-37268 Print Assumptions does not report that a definition was produced while universe checking… CWE-778
- GHSA-gfp8-mp24-5vxg @hulumi/baseline: CloudTrail selector tampering events were not fully detected CWE-778
- CVE-2026-32803 Dell PowerScale OneFS versions 9.5.0.0 through 9.5.1.6, 9.6.0.0 through 9.7.1.13, 9.8.0.0… CWE-778
- CVE-2026-32693 In Juju from version 3.0.0 through 3.6.18, the authorization of the "secret-set" tool is… CWE-778
- CVE-2025-52644 HCL AION is affected by a vulnerability where certain user actions are not adequately… CWE-778
- CVE-2026-25598 Harden-Runner is a CI/CD security agent that works like an EDR for GitHub Actions runners. CWE-778