#VMware
All CosmicBytez Labs articles tagged #VMware, across news, security advisories, how-to guides, and projects.
- News
Critical VMware Workstation and Fusion Flaw Lets VM Admins Execute Host Code
Broadcom patches a critical VMXNET3 integer-overflow bug (CVSS 9.3) letting a VM's local admin break out to run code on the host.
- Newsletter
Weekly Digest — Issue #31
3.5M enterprise records stolen via Azure infostealer campaign, China-nexus APT mass-exploits vCenter in 5 days, and CISA adds Microsoft IKE RCE to KEV.
- News
Suspected China-Nexus Actor Exploits VMware vCenter Flaw, Deploys Babuk-Derived Ransomware
China-nexus APT exploits CVE-2026-59310 in VMware vCenter five days post-disclosure, compromising 361 systems in 47 countries with Babuk-derived ransomware.
- News
Critical VMware vCenter RCE Flaw Exploited for Reverse SSH Access
CVE-2026-59310 is under active exploitation just 5 days after disclosure, with 361 victims across 47 countries receiving reverse SSH backdoors.
- Security
CVE-2026-47868: VMware Avi Load Balancer Local Privilege Escalation
A local privilege escalation vulnerability in VMware Avi Load Balancer allows malicious local users to execute code as root. Versions 22.x through 32.1.1...
- Security
CVE-2026-47870: VMware Avi Load Balancer Authenticated Remote Code Execution
An authenticated privilege escalation flaw in VMware Avi Load Balancer enables network-connected users to execute remote code. CVSS 7.1 High — all...
- Security
CVE-2026-47871: VMware Avi Load Balancer Directory Traversal
A directory traversal vulnerability in VMware Avi Load Balancer allows authenticated network users to bypass file path validation and access arbitrary...
- Security
CVE-2026-47865: Critical Authentication Bypass in VMware Avi Load Balancer
A CVSS 9.8 authentication bypass vulnerability allows unauthenticated remote attackers to gain full access to the VMware Avi Load Balancer Control Plane....
- Security
CVE-2026-47866: Authorization Bypass in VMware Avi Load Balancer
A CVSS 8.3 authorization bypass vulnerability in VMware Avi Load Balancer allows low-privileged authenticated users to access restricted Control Plane...
- Security
CVE-2026-47867: Remote Code Execution via Code Injection in VMware Avi Load Balancer
A CVSS 8.7 code injection vulnerability in VMware Avi Load Balancer enables high-privileged authenticated attackers to execute arbitrary code on the...
- Security
CVE-2026-47869: Second RCE Code Injection Path in VMware Avi Load Balancer
Broadcom discloses a second CVSS 8.7 code injection vulnerability in VMware Avi Load Balancer. CVE-2026-47869 shares the same vector and impact as...
- News
Ivanti, Fortinet, SAP, VMware, n8n Patch RCE, SQL
A coordinated wave of critical security patches landed this week from Ivanti, Fortinet, SAP, VMware, and n8n. Topping the list is CVE-2026-8043 in Ivanti...
- News
Hackers Earn $1,298,250 for 47 Zero-Days at Pwn2Own Berlin
Pwn2Own Berlin 2026 has concluded with security researchers earning over $1.29 million in prizes after successfully exploiting 47 zero-day vulnerabilities...
- News
Kyber Ransomware Gang Uses Post-Quantum Encryption to Target Windows and ESXi
A new ransomware operation called Kyber is targeting Windows systems and VMware ESXi endpoints, with one variant implementing Kyber1024 post-quantum...
- Security
CISA Adds Actively Exploited VMware Aria Operations RCE
CISA has added CVE-2026-22719, a high-severity command injection vulnerability in VMware Aria Operations allowing unauthenticated remote code execution,...
- Security
China-Linked Hackers Exploit VMware ESXi Zero-Days to Escape VMs
Sophisticated attack chain leverages compromised SonicWall VPN and VMware ESXi vulnerabilities to break out of virtual machine isolation and compromise...