{"apiVersion":"1","notice":"Security Threat Pulse API v1. Free, no key. Facts with sources; verdicts follow the published rules at https://securitythreatpulse.com/methodology. Not advice. Some source data is withheld here until its terms allow re-serving.","generatedAt":"2026-11-11T08:30:29.510Z","products":["broadcom"],"actNowTotal":1,"results":[{"query":"broadcom","matched":1,"actNow":1,"events":[{"id":"kev-2026-10-28-broadcom-vmware-esx","url":"https://securitythreatpulse.com/events/kev-2026-10-28-broadcom-vmware-esx","title":"Broadcom VMware ESX: security flaw used in attacks","verdict":"act_now","verdictReason":"Attacks are confirmed. The vulnerability is 103 days old, so many systems are likely still unpatched.","tier":"now","rankScore":5,"rankWhy":["Exploitation is confirmed by an authoritative source.","The confirmation is 14 days old.","5 products are affected."],"rulesVersion":"v3","ladder":{"talk":"confirmed","damage":"none","attempts":"confirmed","exposure":"none","exploited":"confirmed"},"untrackedRungs":["exposure","damage"],"cves":["CVE-2026-41709"],"vendor":"Broadcom","product":"VMware ESX","affectedProducts":[{"kind":"direct","slug":"broadcom/vmwareesx","vendor":"Broadcom","product":"VMware ESX","evidence":["kev"],"vendorKey":"broadcom","productKey":"vmwareesx"},{"kind":"direct","slug":"vmware/cloudfoundation","vendor":"VMware","product":"Cloud Foundation","evidence":["cpe"],"vendorKey":"vmware","productKey":"cloudfoundation"},{"kind":"direct","slug":"vmware/vspherefoundation","vendor":"VMware","product":"Vsphere Foundation","evidence":["cpe"],"vendorKey":"vmware","productKey":"vspherefoundation"},{"kind":"direct","slug":"vmware/esx","vendor":"VMware","product":"Esx","evidence":["cpe"],"vendorKey":"vmware","productKey":"esx"},{"kind":"direct","slug":"vmware/telcocloudplatform","vendor":"VMware","product":"Telco Cloud Platform","evidence":["cpe"],"vendorKey":"vmware","productKey":"telcocloudplatform"}],"category":{"id":"server-backup","label":"Servers and backups","why":"It runs or protects many systems at once, including your backups.","doThis":"Patch it and keep its admin access off the internet."},"summary":"Broadcom VMWare ESX contains an insufficient logging vulnerability that could allow a malicious actor with admin access to perform certain operations without being logged.","cvss":2.7,"epss":0.00689,"exploitMaturity":"none","kevListed":true,"kevDateAdded":"2026-10-28","kevDueDate":"2026-11-11","firstSeenAt":"2026-10-28T00:00:00.000Z","updatedAt":"2026-11-11T00:00:06.173Z","newestEvidenceAt":"2026-11-08T11:32:52.982Z"}]}]}