Broadcom Patches Critical 'VM Escape' Flaw in VMware ESXi, Plus Four More Vulnerabilities
Five security flaws, three rated critical, have been fixed across VMware's most widely-used virtualisation products. One lets an attacker break out of a contained virtual machine and reach the underlying server it runs on.
Key points
- Broadcom patched five vulnerabilities across VMware ESXi, vCenter, Workstation, and Fusion on Wednesday.
- CVE-2026-47876, rated critical, allows a virtual machine escape, meaning an attacker inside a contained environment can break out and run malicious code on the physical server beneath it.
- CVE-2026-59309 is a critical authentication bypass in vCenter, letting attackers into the management system without a valid password.
- CVE-2026-59310, also critical, lets anyone with basic network access run malicious code on a vCenter server.
- Broadcom says none of the five flaws are being actively used by criminals yet, but attackers regularly target VMware products once patches become public.
What actually happened here?
Broadcom, which owns VMware, released a security advisory Wednesday covering five separate flaws across a family of products that businesses use to run many virtual computers on a single physical server. A virtual machine is like a self-contained computer running inside another computer, the same way you might run a Windows program inside a Mac. The danger with a VM escape flaw is that the walls between that contained space and the real machine underneath break down.
The most serious of the five is CVE-2026-47876. It sits in ESXi, the software layer that manages virtual machines in data centres worldwide, specifically inside the VMXNET3 virtual network adapter, a piece of software that acts like a network card for each virtual machine. An attacker who already has administrator access inside one virtual machine can exploit this flaw to write data outside the area of memory they are supposed to touch, and then execute their own code on the host server. In practice, that means jumping out of one isolated environment and landing on the physical machine running everything else. VMware itself describes this as a VM escape.
The failure mode here is scope. One compromised virtual machine should not be able to reach neighbouring machines or the host. When it can, every other tenant on that server is at risk.
| CVE ID | Product(s) | Severity | What it allows |
|---|---|---|---|
| CVE-2026-47876 | ESXi | Critical | VM escape, run code on host |
| CVE-2026-59309 | vCenter | Critical | Bypass login, unauthorised access |
| CVE-2026-59310 | vCenter | Critical | Run code remotely over network |
| CVE-2026-41703 | ESXi, Workstation, Fusion | High | Leak information or crash host process |
| CVE-2026-41709 | ESXi | Low | Admin actions without audit log entry |
vCenter is the management console businesses use to control all their virtual machines from one place. CVE-2026-59309 lets an attacker skip the password check entirely and walk straight in. CVE-2026-59310 goes further: anyone who can reach the vCenter server over a network can run their own code on it, no login required at all.
The high-severity CVE-2026-41703 affects ESXi, Workstation, and Fusion. Someone with permission to deploy virtual machines could use it to extract data or, more realistically, crash the host process, taking everything running on that server offline with it. The low-severity CVE-2026-41709 is narrower: an ESXi admin can take certain actions without those actions appearing in the audit log, useful for covering tracks.
Should ordinary people be worried?
Not directly, but the ripple effect matters. Hospitals, banks, retailers, and cloud providers run enormous amounts of their infrastructure on VMware ESXi and vCenter. A successful VM escape at a cloud host could, in the worst case, let attackers move from one customer's environment into another's.
Broadcom says no criminal group is actively using these flaws yet. That window closes fast once patches are published, because attackers routinely reverse-engineer fixes to understand what was broken. One thing the post-mortem will always say: the patch existed.
If you receive services from a company that runs VMware infrastructure, watch for breach notifications over the coming weeks. If you run VMware products yourself, patch now.
Apply Broadcom's patches immediately and confirm vCenter is not exposed directly to the public internet.
