Warp Panda
Nation-state China Active
- Mentions
- 2
- First seen
- 29 Oct 2026
- Last seen
- 29 Oct 2026
Relevant to you ยท Affects your stack
- Technology:
- VMware vSphere 8 / ESXi
- Threat focus:
- espionage / apt
Origin
China
Profile
Warp Panda is a China-linked threat actor that reportedly exploited a low-severity ESXi logging vulnerability as a zero-day. The actor targeted VMware ESX systems to reduce audit trail visibility. The exploitation was intended to decrease the visibility of audit logs and obscure malicious activity.
Affected vendors
VMwareBroadcom
Linked CVEs
- CVE-2026-41709 KEV CVSS 2.7 EPSS 0%