The US cyber agency CISA has confirmed that attackers are actively exploiting two more software flaws, one in VMware ESX and one in the Linux kernel. Both have been added to its Known Exploited Vulnerabilities list, which means real attacks are already happening.

• What it is: CVE-2026-41709 affects Broadcom VMware ESX (an insufficient logging flaw). CVE-2026-46300 affects the Linux kernel (a missing variable initialisation flaw).
• Who is affected: businesses running VMware ESX virtual host servers, and any Linux-based servers, including web hosting, file servers and network appliances that run on Linux.
• The risk: flaws on this list are a common route for attackers to gain a foothold or hide their activity, so they should be treated as urgent rather than routine.
• What to do: apply the vendor updates from Broadcom and your Linux or appliance vendor as soon as they are available, and prioritise any server that is reachable from the internet.

We recommend businesses check whether they run VMware ESX or Linux-based servers and arrange patching this week. If you are unsure, contact OzComm and we will confirm your exposure. Source: CISA.