VMware vSphere Foundation vulnerabilities
7 published CVEs name VMware vSphere Foundation among the affected products; CISA lists 2 of them as exploited in the wild.
- Published CVEs
- 7
- Last 12 months
- 5
- Critical
- 4
- Known exploited
- 2
Critical 4High 2Medium 0Low 1Not scored 0
CVEs per yearBy the year they were published
- 20252
- 20265
Known exploitedNewest addition to KEV first
- CVE-2026-41709
ESX insufficient logging vulnerability
VMware · Cloud Foundation
ExploitedLow2.7 - CVE-2026-59310
vCenter directory-traversal vulnerability
VMware · Cloud Foundation
ExploitedCritical9.8
Newest CVEs
- CVE-2026-41709
ESX insufficient logging vulnerability
VMware · Cloud Foundation
ExploitedLow2.7 - CVE-2026-41703
Out-of-bounds read vulnerability
VMware · Cloud Foundation
High7.6 - CVE-2026-47876
VMXNET3 out-of-bounds write vulnerability
VMware · Cloud Foundation
Critical9.3 - CVE-2026-59309
vCenter authentication-bypass vulnerability
VMware · Cloud Foundation
Critical9.8 - CVE-2026-59310
vCenter directory-traversal vulnerability
VMware · Cloud Foundation
ExploitedCritical9.8 - CVE-2025-41250
Header injection vulnerability
VMware · vCenter
High8.5 - CVE-2025-41237
VMCI integer-underflow vulnerability
VMware · Cloud Foundation
Critical9.3