VMware Patches 3 Critical vCenter and ESXi Vulnerabilities — VM Escape and Unauthenticated RCE
Broadcom disclosed three critical VMware vulnerabilities on July 29, 2026 — a VMXNET3 VM escape and two unauthenticated RCE flaws targeting vCenter. Patch immediately: compromising vCenter gives an attacker total control over your entire virtualized infrastructure.