thehackernews.com
China-Linked Hackers Exploited VMware ESX Zero-Day to Reduce Audit Trail Visibility
The U.S. Cybersecurity and Infrastructure Security Agency added Broadcom VMware ESX CVE‑2026‑41709 to its Known Exploited Vulnerabilities catalog after CrowdStrike confirmed that the China‑linked threat actor Warp Panda weaponized the flaw to evade audit logging in early 2026. The vulnerability, with a CVSS score of 2.7, allowed administrators to perform actions without being recorded. Broadcom patched the issue in later releases, and CISA urged Federal Civilian Executive Branch agencies to apply the fix by November 11, 2026.