CVE-2025-41226

6.8 MEDIUM 0.2% exploit odds No fix listed Denial of service Server

What it is

VMware ESXi contains a denial-of-service vulnerability that occurs when performing a guest operation. A malicious actor with guest operation privileges on a VM, who is already authenticated through vCenter Server or ESXi may trigger this issue to create a denial-of-service condition of guest VMs with VMware Tools running and guest operations enabled.

At a glance

Exploitability: Can be exploited from the same network segment with a low-privilege account. High risk of service disruption.
Exploit odds: 0.2% chance of exploitation in the next 30 days (EPSS).
Fix: No patch or advisory is linked yet. Look at mitigations or restrict exposure.