en
Severity across 7 analyzed records
A short verification protects source data and prevents automated AI requests.
The GCVE catalog currently lists 7 vulnerability records affecting vSphere Foundation.
Among the 7 records analyzed by CyStack, 6 are High or Critical and 1 appear in the CISA KEV catalog.
Compare the version you run with each vulnerability and the provider guidance below. The data only includes records analyzed so far.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
Explore CyStack VulnScan
| CVE | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2026-41709ESX insufficient logging vulnerability | Exploitation statusNot known exploited | FixYes | Published07/30/2026 | SeverityLow |
CVE-2026-41703Out-of-bounds read vulnerability | Exploitation statusNot known exploited | FixYes | Published07/30/2026 | SeverityHigh |
CVE-2026-47876VMXNET3 out-of-bounds write vulnerability | Exploitation statusNot known exploited | FixYes | Published07/30/2026 | SeverityCritical |
CVE-2026-59309vCenter authentication-bypass vulnerability | Exploitation statusNot known exploited | FixYes | Published07/30/2026 | SeverityCritical |
CVE-2026-59310vCenter directory-traversal vulnerability | Exploitation statusKEV | FixYes | Published07/30/2026 | SeverityCritical |
CVE-2025-41250Header injection vulnerability | Exploitation statusNot known exploited | FixYes | Published09/29/2025 | SeverityHigh |
CVE-2025-41237VMCI integer-underflow vulnerability | Exploitation statusNot known exploited | FixYes | Published07/15/2025 | SeverityCritical |
