VF
Product
vSphere Foundation
On CISA KEVExploited in the wildRansomware-linked
7
CVEs
2
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 4High 2Medium 0Low 1
Watch
Add vSphere Foundation to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-59310 RansomwareIn wildKEV | 9.8 | Jul 30 | vCenter directory-traversal vulnerability Affected: 9.1.x.x; 9.0.x.x |
| CVE-2026-41709 In wildKEV | 2.7 | Jul 30 | ESX insufficient logging vulnerability Affected: 9.1.x.x; 9.0.x.x |
| CVE-2026-59309 | 9.8 | Jul 30 | vCenter authentication-bypass vulnerability Affected: 9.1.x.x; 9.0.x.x |
| CVE-2026-47876 | 9.3 | Jul 30 | VMXNET3 out-of-bounds write vulnerability Affected: 9.1.x.x; 9.0.x.x |
| CVE-2025-41237 | 9.3 | Jul 15 | VMCI integer-underflow vulnerability Affected: 9.0.0.0 |
| CVE-2025-41250 | 8.5 | Sep 29 | Header injection vulnerability Affected: 9.x.x.x before 9.0.1.0 |
| CVE-2026-41703 | 7.6 | Jul 30 | Out-of-bounds read vulnerability Affected: 9.1.x.x; 9.0.x.x |
Showing 7