{"uuid": "425eef6e-5590-4b78-be9c-a1f4a30adda1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "name": "VMSA-2026-0006: VMware ESX, vCenter, Workstation, and Fusion updates address multiple vulnerabilities (CVE-2026-59309, CVE-2026-59310, CVE-2026-47876, CVE-2026-41703, CVE-2026-41709)", "description": "# Support Content Notification - Support Portal - Broadcom support portal\nVMSA-2026-0006: VMware ESX, vCenter, Workstation, and Fusion updates address multiple vulnerabilities (CVE-2026-59309, CVE-2026-59310, CVE-2026-47876, CVE-2026-41703, CVE-2026-41709)\n\nInitial Publication Date\n\n29 July 2026\n\nAffected CVE\n\nCVE-2026-59309, CVE-2026-59310, CVE-2026-47876, CVE-2026-41703, CVE-2026-41709\n\n\n\n* Advisory ID:\u00a0: Advisory Severity:\n  * VMSA-2026-0006: Critical\n* Advisory ID:\u00a0: CVSSv3 Range:\n  * VMSA-2026-0006: 2.7-9.8\n* Advisory ID:\u00a0: Synopsis:\n  * VMSA-2026-0006: VMware ESX, vCenter, Workstation, and Fusion updates address multiple vulnerabilities (CVE-2026-59309, CVE-2026-59310,\u00a0CVE-2026-47876, CVE-2026-41703,\u00a0CVE-2026-41709)\n* Advisory ID:\u00a0: Issue date:\n  * VMSA-2026-0006: 2026-07-29\n* Advisory ID:\u00a0: Updated on:\n  * VMSA-2026-0006: 2026-07-29 (Initial Advisory)\n* Advisory ID:\u00a0: CVE(s)\n  * VMSA-2026-0006: CVE-2026-59309, CVE-2026-59310, CVE-2026-47876, CVE-2026-41703,\u00a0CVE-2026-41709\n\n\n1\\. Impacted Products\n---------------------\n\n*   VMware ESX\n*   VMware vCenter\n*   VMware Workstation\n*   VMware Fusion\n*   VMware Cloud Foundation\n*   VMware vSphere Foundation\n*   VMware Telco Cloud Platform\n*   VMware Telco Cloud Infrastructure\u00a0\n\n2\\. Introduction\n----------------\n\nMultiple vulnerabilities in VMware ESX, vCenter, Workstation, and Fusion were privately reported to Broadcom. Updates are available to remediate these vulnerabilities in affected Broadcom products.\u00a0\n\n3a. vCenter authentication-bypass vulnerability (CVE-2026-59309)\u00a0\n-----------------------------------------------------------------\n\n**Description:**\u00a0VMware vCenter contains an authentication bypass vulnerability in the VMware Directory Service. Broadcom has evaluated the severity of this issue to be in the\u00a0[Critical severity range](https://www.vmware.com/support/policies/security_response.html)\u00a0with a maximum CVSSv3 base score of\u00a0[9.8](https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).\n\n**Known Attack Vectors:  \n**A malicious actor with network access to vCenter\u00a0may exploit this issue to bypass authentication and gain unauthorized access to the system.\n\n**Resolution:**\u00a0To remediate\u00a0CVE-2026-59309\u00a0apply the patches listed in the 'Fixed Version' column of the 'Response Matrix' found below.\n\n**Workarounds:  \n**None\n\n**Additional Documentation:  \n**A supplemental FAQ was created for clarification. Please see:\u00a0[https://brcm.tech/vmsa-2026-0006](https://brcm.tech/vmsa-2026-0006)\n\n**Acknowledgments:**\u00a0Broadcom\u00a0would like to thank Phil Brass and Matt South of Atredis Partners\u00a0for reporting this issue to us.\n\n**Notes:  \n****\\[1\\]** Please note that patches are cumulative, meaning the current version includes all previously released fixes. While CVE-2026-59309 was addressed in 9.1.0.0200 first, version 9.1.0.0300 is the most recent version currently available which includes the fix for this CVE.\n\n  \n3b. vCenter directory-traversal vulnerability (CVE-2026-59310)\u00a0\n------------------------------------------------------------------\n\n**Description:**\u00a0VMware vCenter contains a directory traversal vulnerability in the Syslog server. Broadcom has evaluated the severity of this issue to be in the\u00a0[Critical severity range](https://www.vmware.com/support/policies/security_response.html)\u00a0with a maximum CVSSv3 base score of\u00a0[9.8](https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).\n\n**Known Attack Vectors:  \n**A malicious actor with network access to vCenter\u00a0may exploit this issue to execute arbitrary code.\n\n**Resolution:**\u00a0To remediate\u00a0CVE-2026-59310\u00a0apply the patches listed in the 'Fixed Version' column of the 'Response Matrix' found below.\n\n**Workarounds:  \n**None\n\n**Additional Documentation:  \n**A supplemental FAQ was created for clarification. Please see:\u00a0[https://brcm.tech/vmsa-2026-0006](https://brcm.tech/vmsa-2026-0006)\n\n**Acknowledgments:**\u00a0Broadcom\u00a0would like to thank Phil Brass and Matt South of Atredis Partners\u00a0for reporting this issue to us.\n\n**Notes:  \n**None.\n\n**Response Matrix 3a and 3b:**\u00a0\n\n\n\n* VMware Product: VMware Cloud Foundation,VMware vSphere Foundation\n  * Component: vCenter\n  * Version: 9.1.x.x\n  * Running On: Any\n  * CVE: CVE-2026-59309, CVE-2026-59310\n  * CVSSv3: 9.8\n  * Severity: Critical\n  * Fixed Version: [1] 9.1.0.0300\n  * Workarounds: None\n  * Additional Documentation: FAQ\n* VMware Product: VMware Cloud Foundation,VMware vSphere Foundation\n  * Component: vCenter\n  * Version: 9.0.x.x\n  * Running On: Any\n  * CVE: CVE-2026-59309, CVE-2026-59310\n  * CVSSv3: 9.8\n  * Severity: Critical\n  * Fixed Version: 9.0.2.0100\n  * Workarounds: None\n  * Additional Documentation: FAQ\n* VMware Product: VMware vCenter\n  * Component: N/A\n  * Version: 8.0\n  * Running On: Any\n  * CVE: CVE-2026-59309, CVE-2026-59310\n  * CVSSv3: 9.8\n  * Severity: Critical\n  * Fixed Version: 8.0 U3k\n  * Workarounds: None\n  * Additional Documentation: FAQ\n* VMware Product: VMware Cloud Foundation\u00a0\n  * Component: vCenter\n  * Version: 5.x\n  * Running On: Any\n  * CVE: CVE-2026-59309, CVE-2026-59310\n  * CVSSv3: 9.8\n  * Severity: Critical\n  * Fixed Version: Async patch to 8.0 U3k\n  * Workarounds: None\n  * Additional Documentation: Async Patching\u00a0Guide:\u00a0KB88287\n* VMware Product: VMware Telco Cloud Platform\n  * Component: vCenter\n  * Version: 3.0, 4.x, 5.0.x, 5.1.x\n  * Running On: Any\n  * CVE: CVE-2026-59309, CVE-2026-59310\n  * CVSSv3: 9.8\n  * Severity: Critical\n  * Fixed Version: KB449886\n  * Workarounds: None\n  * Additional Documentation: None\n* VMware Product: VMware Telco Cloud Infrastructure\n  * Component: vCenter\n  * Version: 3.0\n  * Running On: Any\n  * CVE: CVE-2026-59309, CVE-2026-59310\n  * CVSSv3: 9.8\n  * Severity: Critical\n  * Fixed Version: KB449886\n  * Workarounds: None\n  * Additional Documentation: None\n\n\n**\\[1\\]** Please note that patches are cumulative, meaning the current version includes all previously released fixes. While CVE-2026-59309 was addressed in 9.1.0.0200 first, version 9.1.0.0300 is the most recent version currently available which includes the fix for this CVE.\n\n  \n3c. VMXNET3 out-of-bounds write vulnerability (CVE-2026-47876) \u00a0\n-------------------------------------------------------------------\n\n**Description:**\u00a0VMware ESX contains an out-of-bounds write vulnerability in the VMXNET3 virtual network adapter. Broadcom has evaluated the severity of this issue to be in the\u00a0[Critical severity range](https://www.vmware.com/support/policies/security_response.html)\u00a0with a maximum CVSSv3 base score of [9.3](https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H).\n\n**Known Attack Vectors:  \n**A malicious actor with local administrative privileges on a virtual machine with VMXNET3 virtual network adapter may exploit this issue to execute code on the host. Non VMXNET3 virtual adapters are not affected by this issue.\n\n**Resolution:**\u00a0To remediate\u00a0CVE-2026-47876\u00a0apply the patches listed in the 'Fixed Version' column of the 'Response Matrix' found below.\n\n**Workarounds:  \n**None\n\n**Additional Documentation:  \n**A supplemental FAQ was created for clarification. Please see:\u00a0[https://brcm.tech/vmsa-2026-0006](https://brcm.tech/vmsa-2026-0006)\n\n**Acknowledgments:**\u00a0Broadcom would like to thank Nguyen Hoang Thach (@hi\\_im\\_d4rkn3ss) of STARLabs SG working with the Pwn2Own held by Zero day initiative for reporting this issue to us.\n\n**Notes:  \n**None.\n\n**Response Matrix:**\u00a0\n\n\n\n* VMware Product: VMware Cloud Foundation,VMware vSphere Foundation\n  * Component: ESX\n  * Version: 9.1.x.x\n  * Running On: Any\n  * CVE: CVE-2026-47876\n  * CVSSv3: 9.3\n  * Severity: Critical\n  * Fixed Version: ESXi-9.1.0.0200-25557999\n  * Workarounds: None\n  * Additional Documentation: FAQ\n* VMware Product: VMware Cloud Foundation,VMware vSphere Foundation\n  * Component: ESX\n  * Version: 9.0.x.x\n  * Running On: Any\n  * CVE: CVE-2026-47876\n  * CVSSv3: 9.3\n  * Severity: Critical\n  * Fixed Version: ESXi-9.0.2.0100-25595025\n  * Workarounds: None\n  * Additional Documentation: FAQ\n* VMware Product: VMware ESX\n  * Component: N/A\n  * Version: 8.0\n  * Running On: Any\n  * CVE: CVE-2026-47876\n  * CVSSv3: 9.3\n  * Severity: Critical\n  * Fixed Version: ESXi80U3k-25595708\n  * Workarounds: None\n  * Additional Documentation: FAQ\n* VMware Product: VMware Cloud Foundation\u00a0\n  * Component: ESX\n  * Version: 5.x\n  * Running On: Any\n  * CVE: CVE-2026-47876\n  * CVSSv3: 9.3\n  * Severity: Critical\n  * Fixed Version: Async Patching Guide:\u00a0KB88287\n  * Workarounds: None\n  * Additional Documentation: FAQ\n* VMware Product: VMware Telco Cloud Platform\n  * Component: ESX\n  * Version: 5.0.x, 5.1.x\n  * Running On: Any\n  * CVE: CVE-2026-47876\n  * CVSSv3: 9.3\n  * Severity: Critical\n  * Fixed Version: KB449886\n  * Workarounds: None\n  * Additional Documentation: None\n\n\n3d. Out-of-bounds read\u00a0vulnerability (CVE-2026-41703)\u00a0\n------------------------------------------------------\n\n**Description:**\u00a0VMware ESX,\u00a0contain an out-of-bounds read vulnerability. Broadcom has evaluated the severity of this issue to be in the\u00a0[Important severity range](https://www.vmware.com/support/policies/security_response.html)\u00a0with a maximum CVSSv3 base score of\u00a0[7.6](https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L).\n\n**Known Attack Vectors:**\u00a0A malicious actor with\u00a0VM deployment privileges could trigger an out-of-bounds read, potentially leading to information disclosure or more likely a Denial-of-Service (DoS) condition of the host process.\u00a0On Workstation and Fusion, the impact of this vulnerability is restricted to information disclosure.\n\n**Resolution:**\u00a0To remediate\u00a0CVE-2026-41703\u00a0apply the patches listed in the 'Fixed Version' column of the 'Response Matrix' found below.\n\n**Workarounds:  \n**None\n\n**Additional Documentation:  \n**None.\n\n**Acknowledgments:**\u00a0Broadcom\u00a0would like to thank\u00a0Maxim Suhanov (@errno\\_fail)\u00a0for reporting this issue to us.\n\n**Notes:  \n**None.\n\n**Response Matrix:**\u00a0\n\n\n\n* VMware Product: VMware Cloud Foundation,VMware vSphere Foundation\n  * Component: ESX\n  * Version: 9.1.x.x\n  * Running On: Any\n  * CVE: CVE-2026-41703\n  * CVSSv3: 7.6\n  * Severity: Important\n  * Fixed Version: ESXi-9.1.0.0-25370933\n  * Workarounds: None\n  * Additional Documentation: None\n* VMware Product: VMware Cloud Foundation,VMware vSphere Foundation\n  * Component: ESX\n  * Version: 9.0.x.x\n  * Running On: Any\n  * CVE: CVE-2026-41703\n  * CVSSv3: 7.6\n  * Severity: Important\n  * Fixed Version: ESXi-9.0.2.0100-25595025\n  * Workarounds: None\n  * Additional Documentation: None\n* VMware Product: VMware ESX\n  * Component: N/A\n  * Version: 8.0\n  * Running On: Any\n  * CVE: CVE-2026-41703\n  * CVSSv3: 7.6\n  * Severity: Important\n  * Fixed Version: ESXi80U3i-25205845\n  * Workarounds: None\n  * Additional Documentation: None\n* VMware Product: VMware Workstation\n  * Component: N/A\n  * Version: 25H2\u00a0\n  * Running On: Any\n  * CVE: CVE-2026-41703\n  * CVSSv3: 2.7\n  * Severity: Low\n  * Fixed Version: 26H1\n  * Workarounds: None\n  * Additional Documentation: None\n* VMware Product: VMware Fusion\n  * Component: N/A\n  * Version: 25H2\n  * Running On: Any\n  * CVE: CVE-2026-41703\n  * CVSSv3: 2.7\n  * Severity: Low\n  * Fixed Version: 26H1\n  * Workarounds: None\n  * Additional Documentation: None\n* VMware Product: VMware Cloud Foundation\u00a0\n  * Component: ESX\n  * Version: 5.x\n  * Running On: Any\n  * CVE: CVE-2026-41703\n  * CVSSv3: 7.6\n  * Severity: Important\n  * Fixed Version: 5.2.3\n  * Workarounds: None\n  * Additional Documentation: Async Patching Guide:\u00a0KB88287\n* VMware Product: VMware Telco Cloud Platform\n  * Component: ESX\n  * Version: 5.0.x, 5.1.x\n  * Running On: Any\n  * CVE: CVE-2026-41703\n  * CVSSv3: 7.6\n  * Severity: Important\n  * Fixed Version: KB449886\n  * Workarounds: None\n  * Additional Documentation: None\n\n\n3e. ESX insufficient logging\u00a0vulnerability (CVE-2026-41709)\u00a0\n------------------------------------------------------------\n\n**Description:**\u00a0VMware ESX contains an insufficient logging vulnerability. Broadcom has evaluated the severity of this issue to be in the\u00a0[Low severity range](https://www.vmware.com/support/policies/security_response.html)\u00a0with a maximum CVSSv3 base score of\u00a0[2.7](https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N).\n\n**Known Attack Vectors:  \n**A malicious administrator could exploit this issue to perform certain operations without them being logged.\n\n**Resolution:**\u00a0To remediate\u00a0CVE-2026-41709\u00a0apply the patches listed in the 'Fixed Version' column of the 'Response Matrix' found below.\n\n**Workarounds:  \n**None.\n\n**Additional Documentation:  \n**None.\n\n**Acknowledgments:**\u00a0Broadcom\u00a0would like to thank\u00a0Ian Barton of CrowdStrike\u00a0for reporting this issue to us.\n\n**Notes:  \n**None.\n\n**Response Matrix:**\u00a0\n\n\n\n* VMware Product: VMware Cloud Foundation,VMware vSphere Foundation\n  * Component: ESX\n  * Version: 9.1.x.x\n  * Running On: Any\n  * CVE: CVE-2026-41709\n  * CVSSv3: 2.7\n  * Severity: Low\n  * Fixed Version: ESXi-9.1.0.0-25370933\n  * Workarounds: None\n  * Additional Documentation: None\n* VMware Product: VMware Cloud Foundation,VMware vSphere Foundation\n  * Component: ESX\n  * Version: 9.0.x.x\n  * Running On: Any\n  * CVE: CVE-2026-41709\n  * CVSSv3: 2.7\n  * Severity: Low\n  * Fixed Version: ESXi-9.0.2.0100-25595025\n  * Workarounds: None\n  * Additional Documentation: None\n* VMware Product: VMware ESX\n  * Component: N/A\n  * Version: 8.0\n  * Running On: Any\n  * CVE: CVE-2026-41709\n  * CVSSv3: 2.7\n  * Severity: Low\n  * Fixed Version: ESXi80U3j-25429389\n  * Workarounds: None\n  * Additional Documentation: None\n* VMware Product: VMware Cloud Foundation\u00a0\n  * Component: ESX\n  * Version: 5.x\n  * Running On: Any\n  * CVE: CVE-2026-41709\n  * CVSSv3: 2.7\n  * Severity: Low\n  * Fixed Version: 5.2.4\n  * Workarounds: None\n  * Additional Documentation: Async Patching Guide:\u00a0KB88287\n* VMware Product: VMware Telco Cloud Platform\n  * Component: ESX\n  * Version: 5.0.x, 5.1.x\n  * Running On: Any\n  * CVE: CVE-2026-41709\n  * CVSSv3: 2.7\n  * Severity: Low\n  * Fixed Version: KB449886\n  * Workarounds: None\n  * Additional Documentation: None\n\n\n4\\. References\n--------------\n\n**VMware Cloud Foundation 9.1.0.x  \n**Downloads and Documentation:  \n[https://support.broadcom.com/group/ecx/productfiles?subFamily=VMware%20Cloud%20Foundation&displayGroup=VMware%20Cloud%20Foundation%209&release=9.1.0.0&os=&servicePk=540528&language=EN](https://support.broadcom.com/group/ecx/productfiles?subFamily=VMware%20Cloud%20Foundation&displayGroup=VMware%20Cloud%20Foundation%209&release=9.1.0.0&os=&servicePk=540528&language=EN)  \n[https://techdocs.broadcom.com/us/en/vmware-cis/vcf/vcf-9-0-and-later/9-1/release-notes/patch-releases-9-1-0-x.html](https://techdocs.broadcom.com/us/en/vmware-cis/vcf/vcf-9-0-and-later/9-1/release-notes/patch-releases-9-1-0-x.html)\n\n**VMware Cloud Foundation 9.0.x  \n**Downloads and Documentation:  \n[https://support.broadcom.com/group/ecx/productfiles?subFamily=VMware%20Cloud%20Foundation&displayGroup=VMware%20Cloud%20Foundation%209&release=9.0.2.0&os=&servicePk=537791&language=EN](https://support.broadcom.com/group/ecx/productfiles?subFamily=VMware%20Cloud%20Foundation&displayGroup=VMware%20Cloud%20Foundation%209&release=9.0.2.0&os=&servicePk=537791&language=EN)  \n[https://techdocs.broadcom.com/us/en/vmware-cis/vcf/vcf-9-0-and-later/9-0/release-notes/patch-releases-9-0-0-x.html](https://techdocs.broadcom.com/us/en/vmware-cis/vcf/vcf-9-0-and-later/9-0/release-notes/patch-releases-9-0-0-x.html)\n\n**VMware Cloud Foundation 5.2.4  \n**Downloads and Documentation:  \n[https://techdocs.broadcom.com/us/en/vmware-cis/vcf/vcf-5-2-and-earlier/5-2/vcf-release-notes/vmware-cloud-foundation-524-release-notes.html](https://techdocs.broadcom.com/us/en/vmware-cis/vcf/vcf-5-2-and-earlier/5-2/vcf-release-notes/vmware-cloud-foundation-524-release-notes.html)  \n**  \nVMware Cloud Foundation 5.2.3  \n**Downloads and Documentation:  \n[https://techdocs.broadcom.com/us/en/vmware-cis/vcf/vcf-5-2-and-earlier/5-2/vcf-release-notes/vmware-cloud-foundation-523-release-notes.html](https://techdocs.broadcom.com/us/en/vmware-cis/vcf/vcf-5-2-and-earlier/5-2/vcf-release-notes/vmware-cloud-foundation-523-release-notes.html)\n\n**VMware vCenter 9.1.0.0300  \n**Downloads and Documentation:  \n[https://support.broadcom.com/group/ecx/productfiles?displayGroup=VMware%20Cloud%20Foundation%209&release=9.1.0.0&os=&servicePk=540528&language=EN&groupId=540509&viewGroup=true](https://support.broadcom.com/group/ecx/productfiles?displayGroup=VMware%20Cloud%20Foundation%209&release=9.1.0.0&os=&servicePk=540528&language=EN&groupId=540509&viewGroup=true)  \n[https://techdocs.broadcom.com/bin/gethidpage?ux-context-string=vcenter-9-1-0-3&appid=vcf-9-1&language=en&format=rendered](https://techdocs.broadcom.com/bin/gethidpage?ux-context-string=vcenter-9-1-0-3&appid=vcf-9-1&language=en&format=rendered)\n\n**VMware vCenter 9.0.2.0100  \n**Downloads and Documentation:  \n[https://support.broadcom.com/group/ecx/productfiles?displayGroup=VMware%20Cloud%20Foundation%209&release=9.0.2.0&os=&servicePk=537791&language=EN&groupId=537830&viewGroup=true](https://support.broadcom.com/group/ecx/productfiles?displayGroup=VMware%20Cloud%20Foundation%209&release=9.0.2.0&os=&servicePk=537791&language=EN&groupId=537830&viewGroup=true)  \n[https://techdocs.broadcom.com/bin/gethidpage?ux-context-string=9-0-2-0-1&appid=vcf-9-0&language=en&format=rendered](https://techdocs.broadcom.com/bin/gethidpage?ux-context-string=9-0-2-0-1&appid=vcf-9-0&language=en&format=rendered)\n\n**VMware ESX 9.1.0.0200**  \nDownloads and Documentation:  \n[https://support.broadcom.com/group/ecx/productfiles?displayGroup=VMware%20Cloud%20Foundation%209&release=9.1.0.0&os=&servicePk=540528&language=EN&groupId=540591&viewGroup=true](https://support.broadcom.com/group/ecx/productfiles?displayGroup=VMware%20Cloud%20Foundation%209&release=9.1.0.0&os=&servicePk=540528&language=EN&groupId=540591&viewGroup=true)  \n[https://techdocs.broadcom.com/us/en/vmware-cis/vcf/vcf-9-0-and-later/9-1/release-notes/patch-releases-9-1-0-x/vsphere/esx/esx-9-1-0-0200-release-notes.html](https://techdocs.broadcom.com/us/en/vmware-cis/vcf/vcf-9-0-and-later/9-1/release-notes/patch-releases-9-1-0-x/vsphere/esx/esx-9-1-0-0200-release-notes.html)\n\n**VMware ESX 9.0.2.0100  \n**Downloads and Documentation:  \n[https://support.broadcom.com/group/ecx/productfiles?displayGroup=VMware%20Cloud%20Foundation%209&release=9.0.2.0&os=&servicePk=537791&language=EN&groupId=537810&viewGroup=true](https://support.broadcom.com/group/ecx/productfiles?displayGroup=VMware%20Cloud%20Foundation%209&release=9.0.2.0&os=&servicePk=537791&language=EN&groupId=537810&viewGroup=true)  \n[https://techdocs.broadcom.com/us/en/vmware-cis/vcf/vcf-9-0-and-later/9-0/release-notes/patch-releases-9-0-0-x/vsphere/esx/esx-9-0-2-0100-release-notes.html](https://techdocs.broadcom.com/us/en/vmware-cis/vcf/vcf-9-0-and-later/9-0/release-notes/patch-releases-9-0-0-x/vsphere/esx/esx-9-0-2-0100-release-notes.html)\n\n**VMware vCenter 8.0 U3k  \n**Downloads and Documentation:  \n[https://support.broadcom.com/web/ecx/solutiondetails?patchId=16109](https://support.broadcom.com/web/ecx/solutiondetails?patchId=16109)  \n[https://techdocs.broadcom.com/us/en/vmware-cis/vsphere/vsphere/8-0/release-notes/vcenter-server-update-and-patch-release-notes/vsphere-vcenter-server-80u3k-release-notes.html](https://techdocs.broadcom.com/us/en/vmware-cis/vsphere/vsphere/8-0/release-notes/vcenter-server-update-and-patch-release-notes/vsphere-vcenter-server-80u3k-release-notes.html)\n\n**VMware ESX 8.0 U3k  \n**Downloads and Documentation:  \n[https://support.broadcom.com/web/ecx/solutiondetails?patchId=16106](https://support.broadcom.com/web/ecx/solutiondetails?patchId=16106)  \n[https://techdocs.broadcom.com/us/en/vmware-cis/vsphere/vsphere/8-0/release-notes/esxi-update-and-patch-release-notes/vsphere-esxi-80u3k-release-notes.html](https://techdocs.broadcom.com/us/en/vmware-cis/vsphere/vsphere/8-0/release-notes/esxi-update-and-patch-release-notes/vsphere-esxi-80u3k-release-notes.html)\n\n**VMware\u00a0ESX 8.0 U3j  \n**Downloads and Documentation:  \n[https://support.broadcom.com/web/ecx/solutiondetails?patchId=16046](https://support.broadcom.com/web/ecx/solutiondetails?patchId=16046)  \n[https://techdocs.broadcom.com/us/en/vmware-cis/vsphere/vsphere/8-0/release-notes/esxi-update-and-patch-release-notes/vsphere-esxi-80u3j-release-notes.html](https://techdocs.broadcom.com/us/en/vmware-cis/vsphere/vsphere/8-0/release-notes/esxi-update-and-patch-release-notes/vsphere-esxi-80u3j-release-notes.html)\n\n**VMware\u00a0ESX 8.0 U3i  \n**Downloads and Documentation:  \n[https://support.broadcom.com/web/ecx/solutiondetails?patchId=16046](https://support.broadcom.com/web/ecx/solutiondetails?patchId=16046)  \n[https://techdocs.broadcom.com/us/en/vmware-cis/vsphere/vsphere/8-0/release-notes/esxi-update-and-patch-release-notes/vsphere-esxi-80u3i-release-notes.html](https://techdocs.broadcom.com/us/en/vmware-cis/vsphere/vsphere/8-0/release-notes/esxi-update-and-patch-release-notes/vsphere-esxi-80u3i-release-notes.html)\n\n**VMware Workstation 26H1  \n**Downloads and Documentation:  \n[https://support.broadcom.com/group/ecx/productdownloads?subfamily=VMware%20Workstation%20Pro&freeDownloads=true](https://support.broadcom.com/group/ecx/productdownloads?subfamily=VMware%20Workstation%20Pro&freeDownloads=true)  \n[https://techdocs.broadcom.com/us/en/vmware-cis/desktop-hypervisors/workstation-pro/26H1.html](https://techdocs.broadcom.com/us/en/vmware-cis/desktop-hypervisors/workstation-pro/26H1.html)\n\n**VMware Fusion 26H1  \n**Downloads and Documentation:  \n[https://support.broadcom.com/group/ecx/productfiles?subFamily=VMware%20Fusion&displayGroup=VMware%20Fusion%2026H1&release=26H1&os=&servicePk=543219&language=EN&freeDownloads=true](https://support.broadcom.com/group/ecx/productfiles?subFamily=VMware%20Fusion&displayGroup=VMware%20Fusion%2026H1&release=26H1&os=&servicePk=543219&language=EN&freeDownloads=true)  \n[https://techdocs.broadcom.com/us/en/vmware-cis/desktop-hypervisors/fusion-pro/26H1.html](https://techdocs.broadcom.com/us/en/vmware-cis/desktop-hypervisors/fusion-pro/26H1.html)\n\n**Mitre CVE Dictionary Links:**  \n[https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59309](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59309)  \n[https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59310](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59310)  \n[https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-47876](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-47876)  \n[https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-41703](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-41703)  \n[https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-41709](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-41709)  \n\n**FIRST CVSSv3 Calculator:  \n**CVE-2026-59309:\u00a0[https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H](https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)  \nCVE-2026-59310:\u00a0[https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H](https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)  \nCVE-2026-47876:\u00a0[https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H](https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H)  \nCVE-2026-41703:\u00a0[https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L](https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L)  \nCVE-2026-41709:\u00a0[https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N](https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N)\n\n**5\\. Change Log:  \n**\n----------------------\n\n**2026-07-29 VMSA-2026-0006  \n**Initial security advisory.\n\nCopyright 2026 Broadcom. All rights reserved.", "creation_timestamp": "2026-07-30T06:11:30.517685+00:00", "timestamp": "2026-07-30T06:11:30.517685+00:00", "related_vulnerabilities": ["CVE-2026-41703", "CVE-2026-41709", "CVE-2026-47876", "CVE-2026-59310", "CVE-2026-59309"], "author": {"login": "adulau", "name": "Alexandre Dulaunoy", "uuid": "c933734a-9be8-4142-889e-26e95c752803"}}