--- title: CISA Adds Actively Exploited VMware vCenter Flaw... description: CISA added VMware vCenter Server vulnerability CVE-2024-37079 to its Known Exploited Vulnerabilities catalog after confirming active exploitation in the wild.... canonical: https://daily.dev/posts/cisa-adds-actively-exploited-vmware-vcenter-flaw-cve-2024-37079-to-kev-catalog-rkbcyw2zw twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: CISA Adds Actively Exploited VMware vCenter Flaw CVE-2024-37079 to KEV Catalog | daily.dev og:description: CISA added VMware vCenter Server vulnerability CVE-2024-37079 to its Known Exploited Vulnerabilities catalog after confirming active exploitation in the wild.... og:url: https://daily.dev/posts/cisa-adds-actively-exploited-vmware-vcenter-flaw-cve-2024-37079-to-kev-catalog-rkbcyw2zw og:image: https://api.daily.dev/og/posts/RkBCYW2zw.png og:image:alt: CISA Adds Actively Exploited VMware vCenter Flaw CVE-2024-37079 to KEV Catalog og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # CISA Adds Actively Exploited VMware vCenter Flaw CVE-2024-37079 to KEV Catalog **[The Hacker News](https://daily.dev/sources/thn)** · 2 min read · 0 upvotes · 0 comments ## Summary CISA added VMware vCenter Server vulnerability CVE-2024-37079 to its Known Exploited Vulnerabilities catalog after confirming active exploitation in the wild. The critical flaw (CVSS 9.8) is a heap overflow in the DCE/RPC protocol implementation that enables remote code execution via specially crafted network packets. Originally patched by Broadcom in June 2024, the vulnerability can be chained with other flaws to achieve unauthorized root access to ESXi. Federal agencies must apply patches by February 13, 2026. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Similar posts on daily.dev - [CISA: Critical VMware RCE flaw now exploited by ransomware gangs](https://daily.dev/posts/cisa-critical-vmware-rce-flaw-now-exploited-by-ransomware-gangs-ofrnqjulv) · BleepingComputer · 1 upvotes · 0 comments - [2025 CISA KEV Catalog Hits 1,484 Exploited Vulnerabilities](https://daily.dev/posts/2025-cisa-kev-catalog-hits-1-484-exploited-vulnerabilities-m08euiqm7) · Cyble · 0 upvotes · 0 comments - [CISA Adds Actively Exploited XSS Bug CVE-2021-26829 in OpenPLC ScadaBR to KEV](https://daily.dev/posts/cisa-adds-actively-exploited-xss-bug-cve-2021-26829-in-openplc-scadabr-to-kev-ho2pzzq7q) · The Hacker News · 0 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#cyber](https://daily.dev/tags/cyber), [#vulnerability](https://daily.dev/tags/vulnerability), [#vmware](https://daily.dev/tags/vmware) [View this post on daily.dev](https://daily.dev/posts/cisa-adds-actively-exploited-vmware-vcenter-flaw-cve-2024-37079-to-kev-catalog-rkbcyw2zw) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"CISA Adds Actively Exploited VMware vCenter Flaw CVE-2024-37079 to KEV Catalog","url":"https://daily.dev/posts/cisa-adds-actively-exploited-vmware-vcenter-flaw-cve-2024-37079-to-kev-catalog-rkbcyw2zw","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/cisa-adds-actively-exploited-vmware-vcenter-flaw-cve-2024-37079-to-kev-catalog-rkbcyw2zw"},"datePublished":"2026-01-24T08:41:24.711Z","dateModified":"2026-02-28T04:31:39.311Z","description":"CISA added VMware vCenter Server vulnerability CVE-2024-37079 to its Known Exploited Vulnerabilities catalog after confirming active exploitation in the wild....","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/9829dd2f2d0270c54538a825184212a6?_a=AQAEulh","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/9829dd2f2d0270c54538a825184212a6?_a=AQAEulh","isAccessibleForFree":true,"articleSection":"The Hacker News","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"The Hacker News","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/thn","url":"https://daily.dev/sources/thn"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/cisa-adds-actively-exploited-vmware-vcenter-flaw-cve-2024-37079-to-kev-catalog-rkbcyw2zw","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"security,cyber,vulnerability,vmware","timeRequired":"PT2M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"The Hacker News","item":"https://daily.dev/sources/thn"},{"@type":"ListItem","position":3,"name":"CISA Adds Actively Exploited VMware vCenter Flaw CVE-2024-37079 to KEV Catalog"}]} ```