Security · 30 October 2026
CISA Adds VMware ESX Zero-Day Exploited by Warp Panda to KEV Catalog
CISA listed CVE-2026-41709 (CVSS 2.7) in its KEV catalog after CrowdStrike reported Warp Panda used the flaw to hide admin actions in U.S. legal sector attacks.
Why it matters
Add audit‑log visibility checks to your security roadmap; customers will expect VMware ESX to record admin actions after CVE‑2026‑41709.
For product managers
For your product
What does this mean for your product?
Try it on your product More from this issueAll AI news from 30 Oct →
Get this every morning, written for your product.
Deltaday reads the whole AI news cycle and tells you what changed, whether it's real yet, and what to do about it.