On September 3, 2026, Broadcom updated VMware Cloud Foundation to 9.1.1 with multi-tenant model sharing in general availability, a gateway to more than 150 models, and a 2.6x jump in Kubernetes scale. For inference on regulated data, compare the total cost of a consolidated on-premises GPU estate against a hyperscaler’s per-token price before you commit.
Broadcom patched two flaws in VMware Workstation and Fusion: CVE-2026-59346 (CVSS 9.3) and CVE-2026-59347 both let a virtual machine administrator execute code on the host machine. Update to 26H1u1 now — no workaround exists.
A path-traversal flaw in VMware vCenter, rated CVSS 9.8, allows unauthenticated code execution and is already being exploited across 47 countries to drop Babuk-derived ransomware. The fix is two moves: patch without waiting for a maintenance window, and cut the management interface off from the rest of the network.
On August 20, 2026, Microsoft announced the retirement of the license-included Azure VMware Solution: sales stop after October 31, 2026, and a mandatory move to a VCF BYOL model before August 30, 2027. For customers, this is the last exit without going through Broadcom’s VMware Cloud Foundation bundle.
Broadcom disclosed three critical VMware vulnerabilities on July 29, 2026 — a VMXNET3 VM escape and two unauthenticated RCE flaws targeting vCenter. Patch immediately: compromising vCenter gives an attacker total control over your entire virtualized infrastructure.
Released on 21 May 2026, Proxmox VE 9.2 ships with a dynamic load balancer, WireGuard as an SDN fabric protocol, Ceph Tentacle, and kernel 7.0. Two years into the post-Broadcom exodus, the balance of power has definitively shifted.
