EUVD Vulnerability Catalog Actively Exploited (KEV)

EUVD-2026-51107

Severity: LOW Base Score: 2.7 CVSS Version: 3.1

Vulnerability Description

VMware ESX contains an insufficient logging vulnerability. A malicious administrator could exploit this issue to perform certain operations without them being logged.

CVSS Vector Analysis

Below is the complete, human-readable breakdown of the CVSS metric string: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N

▪ Attack Vector (AV): Network
▪ Attack Complexity (AC): Low
▪ Privileges Required (PR): High
▪ User Interaction (UI): None
▪ Scope (S): Unchanged
▪ Confidentiality Impact (C): None
▪ Integrity Impact (I): Low
▪ Availability Impact (A): None

Affected Vendors & Systems

Vendor VMware

References & Advisory Links

Metadata Profile

Database Authority

European Union Agency for Cybersecurity (ENISA) EUVD

Assigner

vmware

EPSS Probability

0.3

Known Aliases
GHSA-vpqj-56x2-gp9p CVE-2026-41709
Published On

2026-07-30

Last Updated

2026-07-30

Exploited Since

2026-10-28