External Article 449886

knowledge.broadcom.com • October 29, 2026

Share: View original

VMware Telco Cloud response to VMSA-2026-0006 (CVE-2026-59309, CVE-2026-59310, CVE-2026-47876, CVE-2026-41703, CVE-2026-41709)

Steps to remediate VMSA-2026-0006 on VMware Telco Cloud products.

TCP: 3.0, 4.x, 5.0.x, 5.1.x

Patch Availability for VMware Telco Cloud Platform / Telco Cloud Infrastructure

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Chinese Hackers Exploit VMware ESXi Logging Flaw as Zero-Day The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has confirmed that a low-severity VMware ESXi vulnerability, CVE-2026-41709, is being by the China-linked threat actor Warp Panda. This insufficient logging flaw allows attackers with administrator access to perform operations without being logged, significantly reducing audit trail visibility. The vulnerability was disclosed on July 30, 2026, and has been added to CISA's Known Exploited Vulnerabilities (KEV) catalog, urging federal agencies to patch it promptly. CrowdStrike reported that Warp Panda has targeted U.S. Organizations, particularly in the legal sector, deploying various malware types such as BrickStorm and SharpStorm. The exploitation of this flaw is part of a broader campaign that also involves other critical vulnerabilities in VMware products. Organizations using affected VMware versions are advised to apply patches immediately to mitigate risks. 4 sources 80

Extracted Entities

CVEs (5)

CVE-2026-41703 CVE-2026-41709 CVE-2026-47876 CVE-2026-59309 CVE-2026-59310

Platforms (2)

Telco Cloud Infrastructure VMware Telco Cloud Platform