CVE-2024-5806
CVSS 9.1 CRITICAL: improper Authentication vulnerability in Progress MOVEit Transfer (SFTP module) can lead to Authentication… EPSS 81% (100th percentile).
Vulnerabilities & Exploits
The Register reported on Oct. 13 that VMware is pairing a new monthly update cadence with paid controls such as HyperArmor and vDefend, using MOVEit CVE-2024-5806 as the example for why customers may need them. VMware says it moved to monthly releases in part because AI keeps surfacing more flaws than users can comfortably validate one by one.
The added tools do more than ship patches faster. vDefend can block traffic that matches an exploit pattern without changing the vulnerable software, and HyperArmor extends that idea to VMware Cloud Foundation by blocking malicious traffic and rejecting changes that alter a known-good state; it also adds multi-factor authentication for privileged access. In plain terms, VMware is selling a layer in front of its own stack so customers can keep up when patch testing lags patch output.
For VCF operators, the lasting shift is that remediation is no longer just a one-time update job; it becomes an ongoing trust in vendor-run controls that sit between attackers and the platform. If your VMware estate depends on broad change validation or privileged access protection, the exposure now includes the paid policy layer as well as the code underneath it.
1 source · 10h ago
CVSS 9.1 CRITICAL: improper Authentication vulnerability in Progress MOVEit Transfer (SFTP module) can lead to Authentication… EPSS 81% (100th percentile).
The Register Security
VMware is pushing so many patches, it thinks users need new tools to manage the flood
It's 2026 and Virtzilla reckons it's OK to pay for MFA
originalPart of the PlainSec briefing for 2026-10-13
Every edition of this story: VMware pairs monthly patches with paid guardrails