What’s Vulnerable › Products

VMware vSphere Foundation vulnerabilities

5 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 7 published in the last 12 months.

Check whether your VMware vSphere Foundation version is affected

Exploited VMware vSphere Foundation vulnerabilities

• CVE-2026-41709 — ESX insufficient logging vulnerability
• CVE-2026-59310 — vCenter directory-traversal vulnerability

Latest VMware vSphere Foundation vulnerabilities

• CVE-2026-47876 — VMXNET3 out-of-bounds write vulnerability (CVSS 9.3)
• CVE-2026-41703 — Out-of-bounds read vulnerability (CVSS 7.6)
• CVE-2026-41709 — ESX insufficient logging vulnerability (CVSS 2.7) — exploited
• CVE-2026-59309 — vCenter authentication-bypass vulnerability (CVSS 9.8)
• CVE-2026-59310 — vCenter directory-traversal vulnerability (CVSS 9.8) — exploited
• CVE-2025-41250 — Header injection vulnerability (CVSS 8.5)
• CVE-2025-41237 — VMCI integer-underflow vulnerability (CVSS 9.3)