Do Son Dell VSI for VMware vSphere Client has a critical unauthenticated RCE flaw (CVE-2026-67261) rated CVSS 9.8. Patch now.
VMware vSphere
Foreman patches a critical 8.0 CVSS command injection flaw (CVE-2026-1961). Malicious hostnames can trigger RCE via WebSocket proxies. Update to 3.18.1 now!
Unit 42 reveals Muddled Libra (Scattered Spider) uses rogue VMs in vSphere to persist. Learn how they bypass defenses without malware. Read more.