VulnRadar

Data against noise.

Page generated: 09 Nov 2026, 13:35 UTC

CVE-2020-4006

VMware Workspace One Access, Access Connector, Identity Manager, and Identity Manager Connector address have a command injection vulnerability.

CVSS 9.1 (CRITICAL) KEV: KNOWN CATALOG

Attention and evidence

HYPE SCORE

0.6/10

REALITY · THREAT PRIORITY

8.5/10

General review priority; not probability

Evidence confidence: Exploitation recorded

Why this priority?

Recorded exploitation baseline: +7.00
Technical severity: CVSS 9.1: +1.36
Fresh EPSS: 17.30%: +0.09

General review priority, not probability, victim count or asset-specific risk. A range covers missing CVSS/EPSS inputs within the current evidence state.

Sources: 13 documents and public datasets.

Hype components

Headline sample (25%)

10/100

Press, 30 days (60%)

5/100

Grounded branding (15%)

0/100

HYPE TOTAL6/100

Sources and documents

TechTarget

Press · 30 Oct 2026, 01:00 · Russian state-sponsored hackers exploit VMware vulnerability - TechTarget

Infosecurity Magazine

Press · 01 Oct 2025, 07:00 · Broadcom Issues Patches for VMware NSX and vCenter Security Flaws - Infosecurity Magazine

The Hacker News

Press · 08 May 2021, 07:00 · Top 12 Security Flaws Russian Spy Hackers Are Exploiting in the Wild - The Hacker News

Security Affairs

Press · 16 Apr 2021, 07:00 · Russia-linked APT SVR actively targets these 5 flaws - Security Affairs

National Security Agency (NSA) (.gov)

Press · 15 Apr 2021, 07:00 · Russian Foreign Intelligence Service Exploiting Five Publicly Known Vulnerabilities to Com - National Security Agency (NSA) (.gov)

See all 13 source documents

Cisco Talos Blog

Press · 15 Apr 2021, 07:00 · Threat Advisory: NSA SVR Advisory Coverage - Cisco Talos Blog

Homeland Security Today

Press · 15 Apr 2021, 07:00 · Russian Foreign Intelligence Service Exploiting Five Publicly Known Vulnerabilities to Compromise U.S. and Allied Networks - Homeland Security Today

The Record from Recorded Future News

Press · 15 Apr 2021, 07:00 · CISA, FBI, NSA reveal five enterprise bugs exploited by Russia's APT29 group - The Record from Recorded Future News

Unit 42

Press · 23 Dec 2020, 08:00 · SolarStorm Supply Chain Attack Timeline - Unit 42

National Security Agency (NSA) (.gov)

Press · 17 Dec 2020, 08:00 · NSA Cybersecurity Advisory: Malicious Actors Abuse Authentication Mechanisms to Access Cloud Resources - National Security Agency (NSA) (.gov)

TechTarget

Press · 07 Dec 2020, 08:00 · Russian state-sponsored hackers exploit VMware vulnerability - TechTarget

The Register

Press · 24 Nov 2020, 08:00 · VMware urges sysadmins to apply workarounds after critical Workspace command execution vuln found - The Register

BleepingComputer

Press · 23 Nov 2020, 08:00 · VMware discloses critical zero-day vulnerability in Workspace One - BleepingComputer

Score evolution

● Hype ● Reality

Earlier evidence-support scores are retained in history; this chart shows only the current priority definition.

━ Hype Score (Perceived) ━ Reality threat priority. Definition changes are not new attacks.

Public exploit evidence

Public exploit entries / repo candidates

Evidence context and dated references

Reality is general threat/review priority, combining observed exploitation, CVSS severity and fresh EPSS. Evidence confidence is separate. This is not calibrated risk, a victim count or an asset-specific assessment. A range reflects missing numeric inputs.

Evidence in context

Confidence in exploitation evidence: Exploitation recorded
Priority basis: Recorded exploitation; CVSS 9.1; EPSS 17.3%
Attention, last 30 days: 1 distinct story titles; 1 press documents; 1 publisher domains.
Technical potential: network access, high privileges, no user interaction.
Observed activity: Exploitation recorded in CISA KEV.
Known scale: Not quantified.
Evidence confidence basis: Trusted exploitation confirmation

Score evaluated: 2026-11-05 13:58:19.609425+00:00 · EPSS snapshot: 2026-11-05T12:03:04Z

Source event timeline

First press mention

23 Nov 2020, 08:00

Published

23 Nov 2020, 21:22

Added to the CISA KEV catalog

03 Nov 2021, 00:00

Latest press mention

30 Oct 2026, 01:00

Score calculated

05 Nov 2026, 13:58