← Today's briefing
Briefing archive
2 daily briefings on what shipped, what broke and what needs patching across the VMware world. Subscribe via RSS.
October 2026
- Broadcom has put a firm date on the end of vSphere 8, NSX 4 and VCF 5.2: 11 October 2027 If you're still planning your move from VCF 5 to VCF 9, you now have a fixed date to plan around: Broadcom's KB 456708 sets 11 October 2027 as the end of service for ESXi and vCenter 8.x, vSAN 8.x, NSX 4.x, VCF 5.2.x, Aria 8.18.x and HCX 4.x. Security is unchanged today but still needs your attention, because vCenter CVE-2026-59310 from VMSA-2026-0006 is in CISA's Known Exploited Vulnerabilities catalogue with known ransomware use. Elsewhere, Broadcom signed a 10-year VCF deal with NTT DOCOMO, and today's deep dive walks through how express patches work in VCF 9.1. Today 4 critical
- vCenter CVE-2026-59310 is in CISA KEV; new VCF Operations 9.1.1 certificate KB A quiet weekend for releases, but not for security: vCenter CVE-2026-59310 from VMSA-2026-0006 has been in CISA's Known Exploited Vulnerabilities catalogue since 18 August, and CISA lists known ransomware campaign use. New in the knowledge base: VCF Operations 9.1.1 can raise recurring internal-certificate alerts after upgrade (KB 456305). Today's deep dive covers the VCF 9.1 license server. 4 critical