References https://nvd.nist.gov/vuln/detail/CVE-2025-41246 https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36149 https://www.rapid7.com/db/vulnerabilities/vmware-vmware-tools-cve-2025-41246/ https://www.tenable.com/cve/CVE-2025-41246 https://github.com/advisories/GHSA-8c4m-2wpp-9qmh https://avd.aliyun.com/detail?id=AVD-2025-41246 https://cve.imfht.com/detail/CVE-2025-41246 https://www.cnvd.org.cn/flaw/show/CNVD-2025-23106 https://knowledge.broadcom.com/external/article/417108/how-to-address-the-vmwaretools-vulnerabi.html https://www.securityweek.com/high-severity-vulnerabilities-patched-in-vmware-aria-operations-nsx-vcenter/
Related Vulnerabilities9Router /api/cli-tools/cowork-settings 命令执行漏洞(CVE-2026-63732)VMware ESXi /sdk 默认口令漏洞9Router /api/cli-tools/cowork-settings 命令执行漏洞(CVE-2026-46339)PoCCVE-2026-35273: Oracle PeopleSoft PeopleTools PSEMHUB - Pre-Auth Java Deserialization RCEWindows截图工具NTLM信息泄露漏洞(CVE-2026-33829)Gradio /static//windows/win.ini 文件读取漏洞 (CVE-2026-28414)Windows Shell Link 敏感信息泄露与欺骗漏洞(CVE-2026-25185)WeRSS /api/v1/wx/tools/export/download 目录遍历漏洞(CVE-2026-2216)PoC用友 NC /uapws/service/nc.itf.ses.inittool.PortalSESInitToolService XML 外部实体注入漏洞PoCCVE-2022-31678: VMWare Cloud Foundation NSX-V - XML External Entity (XXE)SmarterTools SmarterMail 远程代码执行漏洞(CVE-2026-24423)SmarterTools SmarterMail 权限管理不当漏洞PoCCVE-2026-23760: SmarterTools SmarterMail - Admin Password Reset