VMware ESXi Vulnerability: Are Your Servers Still Stuck in 2025’s Digital Danger Zone?
Over 37,000 VMware ESXi instances remain vulnerable to the critical CVE-2025-22224 flaw, despite recent patching efforts. The Shadowserver Foundation highlights this ongoing risk, noting most affected systems are in China and France. With no current workarounds, users must act fast to apply updates before attackers do.

Hot Take:
Looks like VMware ESXi is having a midlife crisis, with over 37,000 instances going wild and exposing themselves to the world. Time to patch up before they become the star of the next big vulnerability scandal!
Key Points:
- Over 37,000 VMware ESXi instances are vulnerable to the CVE-2025-22224 flaw.
- The flaw allows attackers to execute code on the host as the VMX process.
- Shadowserver Foundation found that 4,500 devices were patched recently.
- Most vulnerable instances are in China, France, and the United States.
- There’s a deadline by March 25, 2025, for federal agencies to apply patches.
Already a member? Log in here