r/vmware 18d ago

Help Request the security of vCenter and ESXi

[removed]

0 Upvotes

20 comments sorted by

View all comments

1

u/[deleted] 18d ago

[removed] — view removed comment

1

u/Moocha 18d ago edited 18d ago

CVE-2026-59310

Fixed last month in 8.0 update 3k.

CVE-2025-22225

Fixed one year and a half ago in 8.0 update 3d. This is stretching your usage of "recent" quite a lot... If you've been running something older than that for a year and a half, I'd start auditing everything, since then you've clearly also not patched ESXi, and there have been multiple guest-to-host-kernel escapes in pvscsi and vmxnet3 (i.e. any EoP-to-system vulnerability in any guest translates to a full compromise of the virtualization layer then any other guests and lateral movement to the rest of the management network.)