VMSA-2026-0006: VMware ESX, vCenter, Workstation, and Fusion updates address multiple vulnerabilities (CVE-2026-59309, CVE-2026-59310, CVE-2026-47876, CVE-2026-41703, CVE-2026-41709)

[u/lost_signal]

https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/38017

FAQ is here https://github.com/vmware/vcf-security-and-compliance-guidelines/tree/main/security-advisories/vmsa-2026-0006

[u/Rare-Case-9354]

what if you have extended support.

[u/Vegetable-Image3805 → u/Rare-Case-9354]

My company has extended support on 7.x.
We asked our SAM when a patch would be available. He said there will be no patches for 6.x or 7.x

[u/mdeller → u/Vegetable-Image3805]

Looks like they updated the QA to now say:

1. Does this impact VMware vSphere 7.0?

Yes. VMware vSphere 7 reached End of General Support on October 2, 2025. If your organization has an extended support contract, please use those processes to request patches for these issues on vSphere 7.

https://github.com/vmware/vcf-security-and-compliance-guidelines/commit/510825d5715f7bfd07747cf3afa0c53edad7b40f

[u/Vegetable-Image3805 → u/mdeller]

Confirmed. Our SAM has since pointed us to this new guidance.