en
VMware, operating as VMware by Broadcom, develops enterprise software for virtualization, cloud infrastructure, networking, security, and application modernization. Its portfolio is designed for organizations that deploy and manage data-center, private-cloud, and multi-cloud infrastructure at global scale.
As of 10/21/2026, VMware recorded 8 security vulnerabilities in the last 90 days across 11 products, including 6 rated High or above and 1 known exploited vulnerabilities (KEV) that should be prioritized for immediate remediation.
Over the last 90 days, Cloud Foundation had the most security vulnerabilities in the VMware ecosystem, with 5 vulnerabilities—approximately 62.5% of the provider's total vulnerabilities during this period.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-59347VMware Workstation and Fusion HGFS stack-based buffer-overflow vulnerabilityCVE-2026-59346VMware Workstation and Fusion VMXNET3 integer-overflow vulnerabilityCVE-2026-106123RabbitMQ Java client: plaintext broker credentials leaked in exception message from ConnectionFactoryConfigurator.load()CVE-2026-106122RabbitMQ: Malformed UTF-8 in shortstr properties permanently disables RPC consumersCVE-2026-106121RabbitMQ: JSONReader in the default JSON-RPC mapper never terminates on truncated input, causing DoS1,123 Results | Page 1 of 113
| SeverityCritical |
| SeverityMedium |
| SeverityMedium |
| SeverityMedium |
| SeverityHigh |
| SeverityMedium |
| SeverityMedium |
| SeverityMedium |
| SeverityMedium |