4.4
Medium
CVE-2025-41241 VMware vCenter contains a denial-of-service vulnerability. A malicious actor who is authenticated through vCenter and…
Description
VMware vCenter contains a denial-of-service vulnerability. A malicious actor who is authenticated through vCenter and has permission to perform API calls for guest OS customisation may trigger this vulnerability to create a denial-of-service condition.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| vCenter 8.0 | 8.0 → latest | No fix stated |
| vCenter 7.0 | 7.0 → latest | No fix stated |
| Cloud Foundation | Versions not published | |
| Telco Cloud Platform | Versions not published | |
| Telco Cloud Infrastructure | 2.x | No fix stated |
Other CVEs of vCenter
The 4 CVEs of vCenter →
CVE-2026-59309
VMware vCenter contains an authentication bypass vulnerability in the VMware Directory Service. A malicious actor with…
9.8
Critical
CVE-2026-59310
Broadcom VMware vCenter Path Traversal Vulnerability
9.8
Critical
CVE-2025-41250
VMware vCenter contains an SMTP header injection vulnerability. A malicious actor with non-administrative privileges…
8.5
High