CISA Adds VMware and Linux Flaws to Exploited Catalog

The Cybersecurity and Infrastructure Security Agency added two exploited vulnerabilities, affecting VMware ESX and the Linux kernel, to its Known Exploited Vulnerabilities catalog, setting federal agencies deadlines to address both flaws. CISA added the VMware ESX vulnerability, CVE-2026-41709, on October 28, 2026, and set November 11 as the remediation deadline. The flaw stems from insufficient logging: an attacker who already has administrator privileges can perform certain operations without those actions appearing in system logs. The weakness does not itself grant administrator access. CISA also added Linux kernel vulnerability CVE-2026-46300 to the catalog, with a federal remediation deadline of October 31. The flaw is described as a local privilege-escalation vulnerability. The reporting identifies it as exploited but does not describe a specific incident, attacker or observed activity behind the catalog entry. The catalog lists vulnerabilities for which there is evidence of exploitation. Under federal vulnerability-management requirements, agencies must prioritize remediation of listed vulnerabilities according to applicable deadlines and rules. CISA encourages other...