This flaw scored 2.7 out of 10 and was a zero-day anyway
2026-11-03Security
CVE-2026-41709 is an insufficient logging bug in VMware ESX. VMware scored it 2.7 LOW, NVD never scored it at all, and it is now in the KEV catalogue, reportedly after use by a China-linked group.