vmware
Safeguard articles tagged "vmware" — guides, analysis, and best practices for software supply chain and application security.
30 articles
CVE-2025-22225: VMware ESXi Arbitrary Write Vulnerability
CVE-2025-22225 affects VMware ESXi and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2025-03-04.
CVE-2025-22226: VMware ESXi, Workstation, and Fusion Information Disclosure Vulnerability
CVE-2025-22226 affects VMware ESXi, Workstation, and Fusion and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2025-03-04.
Broadcom's VMware Stack: Three Confirmed-Exploited CVEs Across the Management Plane
vCenter Server, Aria Operations, and VMware Tools each contributed a confirmed-exploited vulnerability, spanning an unauthenticated RCE, a migration-time command injection, and a local privilege escalation.
VMware vCenter's Syslog Server Had a Path Traversal Bug CISA Ties to Ransomware
CVE-2026-59310, a directory traversal vulnerability in vCenter's Syslog server leading to code execution, carries CISA's confirmed ransomware campaign flag.
VMware vCenter (CVE-2021-21985) Explained: The vSAN Plugin RCE
CVE-2021-21985 is a CVSS 9.8 unauthenticated RCE in VMware vCenter Server's vSAN Health plugin, enabled by default on every install. Here is how it works and the patched builds to run.
VMware ESXi CVE-2024-37085 Auth Bypass by Ransomware
CVE-2024-37085 abuses ESXi's AD domain join to grant admin via a specially named group. Exploitation by Akira and Black Basta, detection, and fix.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.