VMware exploitation status and PlainSec coverage

No VMware CVE in our coverage currently carries evidence of exploitation.

Which VMware vulnerabilities are being exploited?

Nothing here is currently listed in KEV or scored as likely to be exploited.

What PlainSec published about VMware

• Panzer Adds ESXi to Its Extortion Kit (2026-09-11)
• vCenter Flaws Expose the Whole Virtual Estate (2026-07-31)
• Partner VPN Access Opens Multi-OS Ransomware Blast Radius (2026-07-30)
• Spirals Shrinks the Ransomware Response Window (2026-07-18)
• Supply-Chain Victims Become VECT’s Ransomware Pool (2026-04-30)
• Kyber Turns ESXi and Windows Into One Blackout (2026-04-22)
• Ransomware Crew Arms Affiliates for Cross-Platform Datacenter Hits (2026-04-21)

Which VMware products this page tracks

• VMware
• VMware ESXi
• VMware Horizon
• VMware NSX
• VMware Workstation
• VMware vCenter

KEV and EPSS are re-checked daily. Page last updated 2026-09-10.