TLP: CLEAR
CanSSOC Threat Assessment ^[*]: HIGH

1. Summary
2. Details
3. Recommendations
4. References
5. Support

Broadcom has released security updates addressing five vulnerabilities affecting VMware ESX, vCenter, Workstation, Fusion, Cloud Foundation, vSphere Foundation, and related Telco Cloud products.

The most serious vulnerabilities could allow an unauthenticated attacker with network access to vCenter to bypass authentication, gain unauthorized access, or execute arbitrary code. A separate VM escape vulnerability could allow an attacker with administrative access to a compromised virtual machine to execute code on the underlying host. Additional vulnerabilities could lead to information disclosure, denial of service, or unauthorized administrative actions without generating expected logs.

We are asking institutions that have the resources to assess and investigate for any signs of exploitation related to these vulnerabilities and report the information back to CanSSOC via your institutional Slack channel or via security@canssoc.canarie.ca.

• CVE | CVSS:
  • CVE-2026-59309 | CVSS: 9.8
  • CVE-2026-59310 | CVSS: 9.8
  • CVE-2026-47876 | CVSS: 9.3
  • CVE-2026-41703 | CVSS: 7.6
• Impacted products:
  • VMware ESX
  • VMware vCenter
  • VMware Workstation
  • VMware Fusion
  • VMware Cloud Foundation
  • VMware vSphere Foundation
  • VMware Telco Cloud Platform
  • VMware Telco Cloud Infrastructure
• Active exploitation: No reports of active exploitation in the wild.

Patches are available, please ensure that all systems are running the latest security patches and are up to date. Note that there are currently no alternative workarounds available.

1. [Advisory] – VMSA-2026-0006: VMware ESX, vCenter, Workstation, and Fusion updates address multiple vulnerabilities
2. [Details] – Broadcom Patches Critical VMware ESXi Vulnerability Enabling Host Code Execution
3. [CCCS] – Cyber security guidance

As always, please let us know if you have any questions or concerns or see unusual activity on your systems that you believe might be associated with this or any other vulnerability. Please send these communications to security.response@utoronto.ca.

[*] The CanSSOC Threat Assessment has the following four scores: LOW, MEDIUM, HIGH, SEVERE.