Reported by 1 outlet
Critical VM Escape Vulnerability Patched in VMware ESXi (CVE-2026-47876) — Plus vCenter Auth Bypass
Why this score
- Breadth
- 0.50 / 2.0 · 1 source
- Authority
- 1.80 / 2.0 · best outlet weight
- Severity
- 5.00 / 5.0 · CVSS + KEV signals
- Velocity
- 0.00 / 2.0 · updates in 48h
- Pickup speed
- 0.00 / 0.6 · time to second source
- Recency
- × 0.00 temporal multiplier
- Community
- + 0.00 / 1.5 · reddit signal
- Score
- 0.0 / 10 = base × recency + community
Timeline
-
original reporting
Critical VM Escape Vulnerability Patched in VMware ESXi (CVE-2026-47876) — Plus vCenter Auth Bypass
securityweek.com · 76d ago · July 30th, 2026
Broadcom published security patches for six vulnerabilities across VMware ESXi, vCenter, Workstation, and Fusion, including a critical VM escape rated as one of three critical-severity flaws.
CVE-2026-47876 — ESXi VM escape (Critical):
-
Out-of-bounds write in the VMXNET3 virtual network adapter
-
An attacker with local admin privileges on a guest VM using this adapter can execute arbitrary code on the host hypervisor
-
This breaks the fundamental isolation boundary between guest and host
CVE-2026-59309 — vCenter authentication bypass (Critical):
- Allows an attacker to gain unauthorized access to vCenter
CVE-2026-59310 — vCenter RCE (Critical):
- Network-accessible attacker can execute arbitrary code
Additional flaws:
-
CVE-2026-41703 (High): DoS on host process via VM deployment permissions
-
CVE-2026-41709 (Low): Admin-privileged activities without logging
No evidence of in-the-wild exploitation, but VMware products are a high-value target for ransomware groups and state actors. Broadcom has published an FAQ detailing patching requirements.
Action: Prioritize patching in virtualized environments. The VM escape (CVE-2026-47876) is the most concerning — any organization hosting VMs from multiple trust levels should treat this as high priority. VMware patches should be treated with the same urgency as hypervisor CVEs historically exploited by ransomware groups.
-