VMware ESXi CVE-2026-41709: CVSS 2.7. CISA KEV. China-nexus zero-day.
The score is arithmetically correct. Admin-only, log-integrity flaw. Low by every formula.
Warp Panda used it before disclosure to remove the audit trail on compromised hypervisors. CrowdStrike attributed it. CISA added it October 28. Deadline: November 11.
Patch restores logging. Doesn't recover what's already missing.
https://threataft.com/articles/vmware-esx-cve-2026-41709-insufficient-logging-warp-panda-kev
ThreatAftVMware ESX 2.7 Flaw Exploited as Zero-Day | ThreatAftCVE-2026-41709: a 2.7 insufficient logging flaw in VMware ESX, exploited by China-nexus Warp Panda to hide admin actions. KEV deadline Nov 11.