Advisories · Technology

VMware vSphere Foundation.

Every CVE that names VMware vSphere Foundation among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-41709 CVE record

CVSS 2.7 LowCritical · KEVKEV

ESX insufficient logging vulnerability
- VMware Cloud Foundation
- VMware vSphere Foundation
- CWE-778
Not analysed yet 30 Jul 2026
CVE-2026-41703 CVE record

CVSS 7.6 High

Out-of-bounds read vulnerability
- VMware Cloud Foundation
- VMware vSphere Foundation
- Memory corruption
Not analysed yet 30 Jul 2026
CVE-2026-47876 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

VMXNET3 out-of-bounds write vulnerability
- VMware Cloud Foundation
- VMware vSphere Foundation
- Memory corruption
Not analysed yet 30 Jul 2026
CVE-2026-59309 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

vCenter authentication-bypass vulnerability
- VMware Cloud Foundation
- VMware vSphere Foundation
- Authentication bypass
Not analysed yet 30 Jul 2026
CVE-2026-59310 CVE record

CVSS 9.8 CriticalCritical · KEV, CVSS 9+KEV · ransomware

vCenter directory-traversal vulnerability
- VMware Cloud Foundation
- VMware vSphere Foundation
- Path traversal
Not analysed yet 30 Jul 2026
CVE-2025-41250 CVE record

CVSS 8.5 High

Header injection vulnerability
- VMware vCenter
- VMware Cloud Foundation
- Command injection
Not analysed yet 29 Sept 2025
CVE-2025-41237 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

VMCI integer-underflow vulnerability
- VMware Cloud Foundation
- VMware vSphere Foundation
- Memory corruption
Not analysed yet 15 Jul 2025