CVE-2025-41241mediumCWE-754

CVE-2025-41241: falha de média gravidade em VMware vCenter

Denial-of-service vulnerability

Publicada em

Seguir esta CVE+ Monitorar VMware Cloud Foundation+ Monitorar Telco Cloud Platform

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 4.4epss 0.3%
VMware vCenter contains a denial-of-service vulnerability. A malicious actor who is authenticated through vCenter and has permission to perform API calls for guest OS customisation may trigger this vulnerability to create a denial-of-service condition.
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H
Produtos afetados
VMware · Cloud FoundationVMware · Telco Cloud InfrastructureVMware · Telco Cloud PlatformVMware · vCenter
CVEs relacionadas — VMware vCenter

No mesmo produto, das mais perigosas para as menos.

CVE-2026-22719HIGHVMware Aria Operations command injection vulnerabilityEPSS 18.3%KEVCVE-2026-59310CRITICALvCenter directory-traversal vulnerabilityEPSS 2.6%KEVCVE-2025-22224CRITICALCVE-2025-22224EPSS 1.6%KEVCVE-2026-41709LOWESX insufficient logging vulnerabilityEPSS 0.7%KEVCVE-2025-41239HIGHvSockets information-disclosure vulnerabilityEPSS 3.2%CVE-2025-41236CRITICALVMXNET3 integer-overflow vulnerabilityEPSS 2.6%