The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added a Broadcom VMware ESX vulnerability (CVE-2026-41709) to its Known Exploited Vulnerabilities catalog after CrowdStrike reported its exploitation by the China-linked threat actor Warp Panda. This zero-day flaw allows attackers with admin access to perform actions without logging, enabling reduced audit trail visibility; Warp Panda has used it to target U.S. legal sector organizations and maintain covert persistence by bypassing detection mechanisms. Agencies are advised to apply available patches by November 11, 2026, to mitigate this active threat.
https://thehackernews.com/2026/10/china-linked-hackers-exploited-vmware.html