Skip to content

VMware ESXi β€” Security Intelligence & Vulnerability Profile


ParameterTechnical Specification
Official NameVMware ESXi
Vendor / Projectvmware
Canonical IDvmware:esxi
Versioning Schemegeneric
CPE Identifierscpe:2.3:o:vmware:esxi:*:*:*:*:*:*:*:*
cpe:2.3:a:vmware:vsphere:*:*:*:*:*:*:*:*
Overall PostureHIGH
Recommended Safe Release8.0U3

Documented CVEs

3 vulnerabilities cataloged in the Hermes intelligence repository.

CISA KEV Entries

0 flaws with confirmed active in-the-wild exploitation.

Weaponized Exploits

1 vulnerabilities with publicly available PoCs or weaponized exploit tooling.

Remediation Target

Recommended upgrade to 8.0U3 to neutralize known flaws.


Progression of Hermes Threat Score (HTS) posture and maximum EPSS probability over the last 30 days:

Current HTS Score

0 / 100

= Stable over 30d

Max EPSS (Exploitation)

0.6 %

= Stable over 30d

CISA KEV Activity

0

No active KEV

HTS Trend Curve (D-30 β†’ Today)2026-08-12 β†’ 2026-09-10

3. Vulnerability History & Version Applicability Matrix

Section titled β€œ3. Vulnerability History & Version Applicability Matrix”
CVECVSS ScoreEPSS ProbabilityCISA KEVAffected VersionsFixed InHermes Analysis
CVE-2026-478768.5 (HIGH)0.4%No< v7.0.3q, < v8.0.37.0U3q, 8.0U3Analysis β†’
CVE-2026-417037.1 (HIGH)0.6%No< v7.0.3q, < v8.0.37.0U3q, 8.0U3Analysis β†’
CVE-2026-417095.3 (MEDIUM)0.4%No< v7.0.3q, < v8.0.37.0U3q, 8.0U3Analysis β†’

Are you operating VMware ESXi in your infrastructure? Inspect your running build to evaluate applicability, confidence score, and security deltas: