Critical Alert 1 Active Exploit Detected Today

CVE-2026-9082 Drupal Core SQL Injection Vulnerability →
Powered by CVE Watchtower
×

CVE Watchtower

Advanced Threat Data Export

Filter and download the raw CVE repository (CSV/JSON) for SIEM integration and internal reporting.

Data export is locked. Upgrade your package to enable filtering and downloading.

← Back to CVE List

CVE-2024-37085NVD

Description

VMware ESXi contains an authentication bypass vulnerability.Β A malicious actor with sufficient Active Directory (AD) permissions can gain full access to an ESXi host that was previously configured to use AD for user management https://blogs.vmware.com/vsphere/2012/09/joining-vsphere-hosts-to-active-directory.html by re-creating the configured AD group ('ESXi Admins' by default) after it was deleted from AD.
Severity Level
MEDIUM (6.8)
Published Date
25/06/2024
Last Modified
21/10/2025
Exploitation Status
ACTIVE