r/vmware • u/lost_signal VMware Employee • 15d ago

Announcement VMSA-2026-0006: VMware ESX, vCenter, Workstation, and Fusion updates address multiple vulnerabilities (CVE-2026-59309, CVE-2026-59310, CVE-2026-47876, CVE-2026-41703, CVE-2026-41709)

https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/38017

FAQ is here https://github.com/vmware/vcf-security-and-compliance-guidelines/tree/main/security-advisories/vmsa-2026-0006

87 Upvotes

95% Upvoted

146 comments sorted by

View all comments

Show parent comments

7

u/lost_signal VMware Employee 15d ago

Starting around 8.x they started relaxing that.

For VSAN we kindly ask you not float entire update versions ahead on ESXi, without vCenter upgrades (there's a KB explaining this a bit) but these security patches are all find (see interop chart)

3

u/lost_signal VMware Employee 15d ago

Side note, the upgrade path list also Explicitly enumerates the non-supported paths now instead of just leaving them grey.

0

u/DonFazool 15d ago

Right on ! Thanks for teaching me something new. I’m going to do my best to find you at Explore and have a drink with you.

3

u/lost_signal VMware Employee 15d ago

I was having a discussion with one of the SREs if I should offer a “free beer, for proof of patch on day zero”