China-Linked Hackers Exploited VMware ESX Zero-Day to Reduce Audit Trail Visibility

CISA added CVE-2026-41709, affecting Broadcom VMware ESX, to its Known Exploited Vulnerabilities catalog after CrowdStrike reported that it had been used by the China-nexus threat actor Warp Panda in attacks targeting the U.S. legal sector.