■ CISCO CVE-2026-76519 · Fixed■ CITRIX CVE-2026-88779 · Fixed■ FORTINET CVE-2026-104286 · Fixed■ MICROSOFT KB5127648 · Fixed in October 13 updates■ ORACLE · Pending Oct 20 CPU (pre-release)■ PALO ALTO CVE-2026-0322 · Fixed■ SAP GHSA-4mv3-jxxm-9cx2 · Patches released 2026-10-13■ VMWARE/BROADCOM KB 455737 · No critical release in October■ MICROSOFT KB5124010 · Mitigated (workaround only

← All impacts

VMware/Broadcom

VMware/Broadcom October 2026: no verified critical security release; vCenter 9.1.x upgrade data-loss advisory

No critical release

Security releases: I found no Critical VMware advisory issued in October 2026 that I could verify. The last Critical VMSA I found, VMSA-2026-0006, was issued in July and updated in August. KEV shows no VMware/Broadcom additions in October. (KEV) An October advisory for Workstation/Fusion (VMSA-2026-0007) was referenced, but I didn't fetch the Broadcom page, so its severity is unverified and it's left out.

Post-install / upgrade impact (confirmed by Broadcom, 2026-10-09)

  • Upgrading to vCenter Server / VCF 9.1.0 or 9.1.1 from 8.0 U3+, 9.0.0, 9.0.1 or 9.0.2 can remove Supervisor Control Plane VMs and Foundation Load Balancers from inventory. This happens if the vLCM/VUM depot was previously reset with the KB 316581 script. (VMware blog)
  • Before upgrading: run the checker and remediation scripts in Broadcom KB 455737 (VDT reports [FAIL] VUM SCHEMA CHECK). (VMware blog)
  • If you already upgraded and VMs are missing: revert to the pre-upgrade backup or snapshot, then follow KB 457944. (VMware blog)
Last verified 2026-10-15Report an error: [email protected]