https://exploit-radar.com/en/flux/categories/virtualisation.xml Exploit Radar: Virtualization, VDI and cloud The latest additions to CISA’s catalog of exploited vulnerabilities in the “Virtualization, VDI and cloud” category (indicative classification). 2026-08-18T00:00:00Z Exploit Radar https://exploit-radar.com/en/cve/CVE-2026-59310/ CVE-2026-59310 — VMware (Broadcom) vCenter Server 2026-08-18T00:00:00Z Apply the patches or mitigations from VMware (Broadcom); if none are available, stop using the product. Start with internet-facing devices. CISA also asks you to hunt for signs of compromise: patching is not enough if the device has already been breached. CISA deadline: 3 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on August 18, 2026. https://exploit-radar.com/en/cve/CVE-2024-37079/ CVE-2024-37079 — VMware (Broadcom) vCenter Server 2026-01-23T00:00:00Z Apply the patches or mitigations from VMware (Broadcom); if none are available, stop using the product. For cloud services, follow the guidance from VMware (Broadcom). CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on January 23, 2026. https://exploit-radar.com/en/cve/CVE-2025-41244/ CVE-2025-41244 — VMware (Broadcom) VMware Tools 2025-10-30T00:00:00Z Apply the patches or mitigations from VMware (Broadcom); if none are available, stop using the product. For cloud services, follow the guidance from VMware (Broadcom). CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on October 30, 2025. https://exploit-radar.com/en/cve/CVE-2024-8068/ CVE-2024-8068 — Citrix Session Recording 2025-08-25T00:00:00Z Apply the patches or mitigations from Citrix; if none are available, stop using the product. For cloud services, follow the guidance from Citrix. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on August 25, 2025. https://exploit-radar.com/en/cve/CVE-2024-8069/ CVE-2024-8069 — Citrix Session Recording 2025-08-25T00:00:00Z Apply the patches or mitigations from Citrix; if none are available, stop using the product. For cloud services, follow the guidance from Citrix. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on August 25, 2025. https://exploit-radar.com/en/cve/CVE-2025-22224/ CVE-2025-22224 — VMware (Broadcom) ESXi 2025-03-04T00:00:00Z Apply the patches or mitigations from VMware (Broadcom); if none are available, stop using the product. For cloud services, follow the guidance from VMware (Broadcom). CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on March 4, 2025. https://exploit-radar.com/en/cve/CVE-2025-22225/ CVE-2025-22225 — VMware (Broadcom) ESXi 2025-03-04T00:00:00Z Apply the patches or mitigations from VMware (Broadcom); if none are available, stop using the product. For cloud services, follow the guidance from VMware (Broadcom). CISA deadline: 21 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on March 4, 2025. https://exploit-radar.com/en/cve/CVE-2025-22226/ CVE-2025-22226 — VMware (Broadcom) ESXi 2025-03-04T00:00:00Z Apply the patches or mitigations from VMware (Broadcom); if none are available, stop using the product. For cloud services, follow the guidance from VMware (Broadcom). CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on March 4, 2025. https://exploit-radar.com/en/cve/CVE-2024-49035/ CVE-2024-49035 — Microsoft Partner Center 2025-02-25T00:00:00Z Apply the patches or mitigations from Microsoft; if none are available, stop using the product. For cloud services, follow the guidance from Microsoft. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on February 25, 2025. https://exploit-radar.com/en/cve/CVE-2025-24989/ CVE-2025-24989 — Microsoft Power Pages 2025-02-21T00:00:00Z Apply the patches or mitigations from Microsoft; if none are available, stop using the product. For cloud services, follow the guidance from Microsoft. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on February 21, 2025. https://exploit-radar.com/en/cve/CVE-2024-38812/ CVE-2024-38812 — VMware (Broadcom) vCenter Server 2024-11-20T00:00:00Z Apply the patches or mitigations from VMware (Broadcom); if none are available, stop using the product. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on November 20, 2024. https://exploit-radar.com/en/cve/CVE-2024-38813/ CVE-2024-38813 — VMware (Broadcom) vCenter Server 2024-11-20T00:00:00Z Apply the patches or mitigations from VMware (Broadcom); if none are available, stop using the product. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on November 20, 2024. https://exploit-radar.com/en/cve/CVE-2024-37085/ CVE-2024-37085 — VMware (Broadcom) ESXi 2024-07-30T00:00:00Z Apply the patches or mitigations from VMware (Broadcom); if none are available, stop using the product. CISA deadline: 21 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on July 30, 2024. https://exploit-radar.com/en/cve/CVE-2022-22948/ CVE-2022-22948 — VMware (Broadcom) vCenter Server 2024-07-17T00:00:00Z Apply the patches or mitigations from VMware (Broadcom); if none are available, stop using the product. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on July 17, 2024. https://exploit-radar.com/en/cve/CVE-2023-34048/ CVE-2023-34048 — VMware (Broadcom) vCenter Server 2024-01-22T00:00:00Z Apply the patches or mitigations from VMware (Broadcom); if none are available, stop using the product. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on January 22, 2024. https://exploit-radar.com/en/cve/CVE-2023-20867/ CVE-2023-20867 — VMware (Broadcom) VMware Tools 2023-06-23T00:00:00Z Apply the security update from VMware (Broadcom). CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on June 23, 2023. https://exploit-radar.com/en/cve/CVE-2021-21973/ CVE-2021-21973 — VMware (Broadcom) vCenter Server 2022-03-07T00:00:00Z Apply the security update from VMware (Broadcom). CISA deadline: 14 days. Added to CISA’s catalog of exploited vulnerabilities on March 7, 2022. https://exploit-radar.com/en/cve/CVE-2008-3431/ CVE-2008-3431 — Oracle VirtualBox 2022-03-03T00:00:00Z Apply the security update from Oracle. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on March 3, 2022. https://exploit-radar.com/en/cve/CVE-2021-22017/ CVE-2021-22017 — VMware (Broadcom) vCenter Server 2022-01-10T00:00:00Z Apply the security update from VMware (Broadcom). CISA deadline: 14 days. Added to CISA’s catalog of exploited vulnerabilities on January 10, 2022. https://exploit-radar.com/en/cve/CVE-2019-11634/ CVE-2019-11634 — Citrix Workspace app / Receiver 2021-11-03T00:00:00Z Apply the security update from Citrix. CISA deadline: 181 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on November 3, 2021. https://exploit-radar.com/en/cve/CVE-2019-5544/ CVE-2019-5544 — VMware (Broadcom) ESXi 2021-11-03T00:00:00Z Apply the security update from VMware (Broadcom). CISA deadline: 181 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on November 3, 2021. https://exploit-radar.com/en/cve/CVE-2020-3952/ CVE-2020-3952 — VMware (Broadcom) vCenter Server 2021-11-03T00:00:00Z Apply the security update from VMware (Broadcom). CISA deadline: 181 days. Added to CISA’s catalog of exploited vulnerabilities on November 3, 2021. https://exploit-radar.com/en/cve/CVE-2020-3992/ CVE-2020-3992 — VMware (Broadcom) ESXi 2021-11-03T00:00:00Z Apply the security update from VMware (Broadcom). CISA deadline: 181 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on November 3, 2021. https://exploit-radar.com/en/cve/CVE-2021-1497/ CVE-2021-1497 — Cisco HyperFlex HX 2021-11-03T00:00:00Z Apply the security update from Cisco. CISA deadline: 14 days. Added to CISA’s catalog of exploited vulnerabilities on November 3, 2021. https://exploit-radar.com/en/cve/CVE-2021-1498/ CVE-2021-1498 — Cisco HyperFlex HX 2021-11-03T00:00:00Z Apply the security update from Cisco. CISA deadline: 14 days. Added to CISA’s catalog of exploited vulnerabilities on November 3, 2021. https://exploit-radar.com/en/cve/CVE-2021-21972/ CVE-2021-21972 — VMware (Broadcom) vCenter Server 2021-11-03T00:00:00Z Apply the security update from VMware (Broadcom). CISA deadline: 14 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on November 3, 2021. https://exploit-radar.com/en/cve/CVE-2021-21985/ CVE-2021-21985 — VMware (Broadcom) vCenter Server 2021-11-03T00:00:00Z Apply the security update from VMware (Broadcom). CISA deadline: 14 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on November 3, 2021. https://exploit-radar.com/en/cve/CVE-2021-22005/ CVE-2021-22005 — VMware (Broadcom) vCenter Server 2021-11-03T00:00:00Z Apply the security update from VMware (Broadcom). CISA deadline: 14 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on November 3, 2021. https://exploit-radar.com/en/cve/CVE-2021-38647/ CVE-2021-38647 — Microsoft Open Management Infrastructure (OMI) 2021-11-03T00:00:00Z Apply the security update from Microsoft. CISA deadline: 14 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on November 3, 2021. https://exploit-radar.com/en/cve/CVE-2020-1040/ CVE-2020-1040 — Microsoft Hyper-V 2021-11-03T00:00:00Z Apply the security update from Microsoft. CISA deadline: 181 days. Added to CISA’s catalog of exploited vulnerabilities on November 3, 2021. https://exploit-radar.com/en/cve/CVE-2020-3950/ CVE-2020-3950 — VMware (Broadcom) Workstation / Fusion 2021-11-03T00:00:00Z Apply the security update from VMware (Broadcom). CISA deadline: 181 days. Added to CISA’s catalog of exploited vulnerabilities on November 3, 2021. https://exploit-radar.com/en/cve/CVE-2021-38645/ CVE-2021-38645 — Microsoft Open Management Infrastructure (OMI) 2021-11-03T00:00:00Z Apply the security update from Microsoft. CISA deadline: 14 days. Added to CISA’s catalog of exploited vulnerabilities on November 3, 2021. https://exploit-radar.com/en/cve/CVE-2021-38648/ CVE-2021-38648 — Microsoft Open Management Infrastructure (OMI) 2021-11-03T00:00:00Z Apply the security update from Microsoft. CISA deadline: 14 days. Added to CISA’s catalog of exploited vulnerabilities on November 3, 2021. https://exploit-radar.com/en/cve/CVE-2021-38649/ CVE-2021-38649 — Microsoft Open Management Infrastructure (OMI) 2021-11-03T00:00:00Z Apply the security update from Microsoft. CISA deadline: 14 days. Added to CISA’s catalog of exploited vulnerabilities on November 3, 2021. https://exploit-radar.com/en/cve/CVE-2019-13608/ CVE-2019-13608 — Citrix StoreFront 2021-11-03T00:00:00Z Apply the security update from Citrix. CISA deadline: 181 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on November 3, 2021.