HackerFeeds

CyberSecurity News

Chinese Hackers Quietly Used Low-Severity ESXi Logging Flaw as Zero-Day

SecurityWeek
· October 29, 2026
Vulnerabilities

AI summary

A low-severity flaw in ESXi, identified as CVE-2026-41709, has been exploited by Chinese hackers as a zero-day vulnerability. This flaw allows attackers with administrative privileges to carry out operations without leaving a log record. The vulnerability enables stealthy actions by bypassing the logging mechanism. Chinese hackers have been using this flaw quietly. The issue is related to logging in ESXi.

Vulnerabilities mentioned

CVE-2026-41709
LOW
CVSS 2.7
CISA KEV

VMware ESX contains an insufficient logging vulnerability. A malicious administrator could exploit this issue to perform certain operations without them being logged.

Read the full article at SecurityWeekwww.securityweek.com/chinese-hackers-quietly-used-low-severity-esxi-logging-flaw-as-zero-day/

This is an AI-generated brief aggregated by HackerFeeds for convenience and grounded in the source’s own summary; the related CVE, threat-group and country data is from HackerFeeds’ own indexes. The original article is the authoritative source — all rights belong to SecurityWeek.