China-Linked Hackers Exploited VMware ESX Zero-Day to Reduce Audit Trail Visibility

What the source reports

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added a security flaw impacting Broadcom VMware ESX to its Known Exploited Vulnerabilities (KEV) catalog, after CrowdStrike revealed that it had been weaponized by a China-nexus threat actor known as Warp Panda in attacks targeting the U.S. legal sector. The vulnerability in question is CVE-2026-41709 (CVSS score:

This dispatch is based on reporting from The Hacker News. The original publication should be read for the complete context, named sources, dates, and qualifications.

Why it matters

The development is relevant to the way technology is built, secured, governed, or used. Readers should distinguish the reported facts from any interpretation added during editorial review.

The original source remains the authority for the underlying report.

OnBytr’s role is to provide a concise, source-linked explanation and identify the practical question worth watching next. This post is an editorial summary, not a substitute for the original reporting.