[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fW_IoiSyEEXj_ce_AdcBRPUYVFHFH7pyVU28CHfbxN2o":3},{"article":4,"iocs":54,"watch_terms":71,"solutions":72,"lesson":157},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":31,"category":32,"article_tags":36},"abb0e239-7b01-4128-b499-cb10d5d2d9d9","VMware fixes three critical flaws allowing auth bypass, VM escapes","vmware-fixes-three-critical-flaws-allowing-auth-bypass-vm-escapes-6d5986","Broadcom has released security updates to fix five vulnerabilities in VMware vCenter, ESX, Workstation, and Fusion, including three critical flaws that allow attackers to bypass authentication, execute arbitrary code, or escape from a virtual machine to the host. [...]","Broadcom released security updates addressing five vulnerabilities in VMware vCenter, ESX, Workstation, and Fusion products. Three critical flaws (CVE-2026-59309, CVE-2026-59310, CVE-2026-47876) allow unauthenticated attackers to bypass authentication, execute arbitrary code, and escape from virtual machines to the host system with CVSS scores of 9.8 and 9.3. The company has designated these as emergency fixes requiring immediate patching, though updates will cause temporary service interruptions.","Broadcom patches five VMware vulnerabilities, three critical flaws enabling auth bypass and VM escapes","https:\u002F\u002Fwww.bleepingcomputer.com\u002Fnews\u002Fsecurity\u002Fvmware-fixes-three-critical-flaws-allowing-auth-bypass-vm-escapes\u002F","https:\u002F\u002Fwww.bleepstatic.com\u002Fcontent\u002Fhl-images\u002F2023\u002F10\u002F25\u002FVMware_red.jpg","2026-07-30T18:00:51+00:00","2026-07-30T20:00:18.172786+00:00",9,[17,20,23,25,27,29],{"name":18,"type":19},"Broadcom","vendor",{"name":21,"type":22},"VMware vCenter","product",{"name":24,"type":22},"VMware ESX",{"name":26,"type":22},"VMware Workstation",{"name":28,"type":22},"VMware Fusion",{"name":30,"type":22},"VMXNET3","80544778-fabb-4dcd-aa35-17492e5dcf4f",{"id":31,"icon":33,"name":34,"slug":35},null,"Vulnerabilities","vulnerabilities",[37,42,47,49],{"category":38},{"id":39,"icon":33,"name":40,"slug":41},"2c8f44d4-b56e-47cf-9677-04f22c9ee78d","Identity & Access","identity-access",{"category":43},{"id":44,"icon":33,"name":45,"slug":46},"574f766a-fb3f-487c-8d2c-0720ae75471b","Zero-day","zero-day",{"category":48},{"id":31,"icon":33,"name":34,"slug":35},{"category":50},{"id":51,"icon":33,"name":52,"slug":53},"c70f3a41-2f0c-4608-870d-b8cbcd8be076","Cloud Security","cloud-security",[55,59,62,65,68],{"type":56,"value":57,"context":58},"cve","CVE-2026-59309","Critical authentication bypass in VMware Directory Service allowing unauthenticated network access to vCenter",{"type":56,"value":60,"context":61},"CVE-2026-59310","Critical directory traversal in vCenter Syslog server enabling arbitrary code execution by unauthenticated attacker",{"type":56,"value":63,"context":64},"CVE-2026-47876","Critical out-of-bounds write in VMXNET3 adapter enabling VM escape to ESX host",{"type":56,"value":66,"context":67},"CVE-2026-41703","Out-of-bounds read in ESX, Workstation, Fusion causing information disclosure or DoS",{"type":56,"value":69,"context":70},"CVE-2026-41709","Insufficient logging vulnerability allowing malicious ESX administrator to perform unlogged operations",[18,21,24],{"controls":73,"vendors":156},[74,102,131],{"slug":75,"name":76,"problem":77,"products":78},"privileged-access-management","Privileged access management (PAM)","Admin accounts stop being one stolen password away from control of everything.",[79,87,95],{"vendor_slug":80,"vendor_name":81,"vendor_logo":82,"product_slug":83,"product_name":84,"url":85,"description":86},"wallix","WALLIX","\u002Fvendor-logos\u002Fwallix.png","wallix-pam","WALLIX PAM","https:\u002F\u002Fwww.wallix.com\u002Fproducts\u002Fprivileged-access-management-software\u002F","Privileged access management with session recording, for IT and OT environments.",{"vendor_slug":88,"vendor_name":89,"vendor_logo":90,"product_slug":91,"product_name":92,"url":93,"description":94},"delinea","Delinea","\u002Fvendor-logos\u002Fdelinea.png","secret-server","Delinea Secret Server","https:\u002F\u002Fdelinea.com\u002Fproducts\u002Fsecret-server","Vault for privileged credentials with discovery, rotation and session recording.",{"vendor_slug":96,"vendor_name":97,"vendor_logo":98,"product_slug":75,"product_name":99,"url":100,"description":101},"threatlocker","ThreatLocker","\u002Fvendor-logos\u002Fthreatlocker.png","Privileged Access Management","https:\u002F\u002Fwww.threatlocker.com\u002Fcapabilities\u002Fprivileged-access-management","Gives elevated rights to specific applications only where needed, so users do not need local admin accounts.",{"slug":103,"name":104,"problem":105,"products":106},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",[107,115,123],{"vendor_slug":108,"vendor_name":109,"vendor_logo":110,"product_slug":111,"product_name":112,"url":113,"description":114},"tenable","Tenable","\u002Fvendor-logos\u002Ftenable.png","tenable-vulnerability-management","Tenable Vulnerability Management","https:\u002F\u002Fwww.tenable.com\u002Fproducts\u002Fvulnerability-management","Cloud-based vulnerability scanning and prioritisation, built on Nessus.",{"vendor_slug":116,"vendor_name":117,"vendor_logo":118,"product_slug":119,"product_name":120,"url":121,"description":122},"qualys","Qualys","\u002Fvendor-logos\u002Fqualys.png","vmdr","Qualys VMDR","https:\u002F\u002Fwww.qualys.com\u002Fapps\u002Fvulnerability-management-detection-response\u002F","Vulnerability management, detection and response with risk-based prioritisation.",{"vendor_slug":124,"vendor_name":125,"vendor_logo":126,"product_slug":127,"product_name":128,"url":129,"description":130},"rapid7","Rapid7","\u002Fvendor-logos\u002Frapid7.png","insightvm","Rapid7 Exposure Command (InsightVM)","https:\u002F\u002Fwww.rapid7.com\u002Fproducts\u002Finsightvm\u002F","Vulnerability scanning and risk-based prioritisation; InsightVM is now part of Exposure Command, alongside attack surface and cloud risk.",{"slug":132,"name":133,"problem":134,"products":135},"patch-management","Automated patch management","Known holes get closed in days, not months.",[136,144,152],{"vendor_slug":137,"vendor_name":138,"vendor_logo":139,"product_slug":140,"product_name":141,"url":142,"description":143},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","intune","Microsoft Intune","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fmicrosoft-intune","Device management for Windows, macOS, iOS and Android, including update rings and compliance policies.",{"vendor_slug":145,"vendor_name":146,"vendor_logo":147,"product_slug":148,"product_name":149,"url":150,"description":151},"ivanti","Ivanti","\u002Fvendor-logos\u002Fivanti.png","neurons-patch-management","Ivanti Neurons for Patch Management","https:\u002F\u002Fwww.ivanti.com\u002Fproducts\u002Fivanti-neurons-for-patch-management","Risk-based patch management for operating systems and third-party applications.",{"vendor_slug":116,"vendor_name":117,"vendor_logo":118,"product_slug":132,"product_name":153,"url":154,"description":155},"Qualys Patch Management","https:\u002F\u002Fwww.qualys.com\u002Fapps\u002Fpatch-management\u002F","Patch deployment for operating systems and third-party applications, linked to vulnerability findings.",[],{"slug":158,"title":159,"body":160,"framework_refs":161,"framework_notes":173},"critical-vmware-flaws-enable-auth-bypass-and-vm-escapes-patch-immediately","Critical VMware Flaws Enable Auth Bypass and VM Escapes — Patch Immediately","Broadcom disclosed three critical vulnerabilities in VMware vCenter, ESXi, Workstation, and Fusion that allow unauthenticated attackers to bypass authentication, execute arbitrary code, and escape virtual machine boundaries to compromise the underlying host. With CVSS scores of 9.8 and 9.3, these flaws represent a severe risk to virtualized infrastructure, which often underpins entire enterprise environments. VM escape vulnerabilities are particularly dangerous because they can allow an attacker who has compromised a guest VM to pivot to the hypervisor and potentially every other VM running on the same host. The emergency designation from Broadcom underscores that the window between disclosure and active exploitation is extremely short for high-profile virtualization platforms, making delayed patching unacceptable.",[162,163,164,165,166,167,168,169,170,171,172],"CIS Control 7: Continuous Vulnerability Management","CIS Control 12: Network Infrastructure Management","CIS Control 4: Secure Configuration of Enterprise Assets","NIST SP 800-40 Rev. 4: Guide to Enterprise Patch Management","NIST SI-2: Flaw Remediation","NIST AC-3: Access Enforcement","NIST SC-7: Boundary Protection","NIST AU-2: Event Logging","ITIL Change Management: Emergency Change Procedure","ISO\u002FIEC 27001: A.12.6.1 Management of Technical Vulnerabilities","GDPR Article 32: Security of Processing (timely mitigation of known vulnerabilities)",{}]