PoC Released for Critical VMware VMXNET3 Flaw Enabling Guest-to

Cybersecuritynews •Abinaya • October 8, 2026

A public proof of concept is now available for CVE-2026-59346, a critical integer overflow flaw in VMware’s VMXNET3 virtual network adapter, released by 0xCyberstan. The flaw can allow an attacker with administrative access inside a guest virtual machine to execute code on the host. However, the published PoC shows a host process crash, not a […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Public PoC Exploit for VMware VMXNET3 Vulnerability Released A public proof-of-concept (PoC) exploit has been released for CVE-2026-59346, a critical integer overflow vulnerability in VMware's VMXNET3 virtual network adapter. This flaw allows an attacker with administrative access in a guest virtual machine to execute code on the host system. The vulnerability has a CVSS score of 9.3 and specifically affects the TCP Segmentation Offload (TSO) processing within the vmware-vmx process. Exploitation requires the attacker to first execute high-privileged code in the guest OS. The PoC demonstrates a memory-safety failure that can crash the host's vmware-vmx process. VMware has released a patch in version 26H1u1 to address this vulnerability. This incident follows a previous vulnerability, CVE-2025-41236, which also affected the VMXNET3 adapter. The PoC was published by security researcher Stan S and is available for public use. 4 sources 71

Extracted Entities

PoC Released for Critical VMware VMXNET3 Flaw Enabling Guest-to

The full story

Extracted Entities

Attack Types (1)

CVEs (1)

CWE Weaknesses (1)

Tools (1)