An exploit for CVE-2021-22005 has been released and is being used by malicious actors. The vulnerability is in the analytics service of the VMware vCenter server application. VMware confirmed reports of it being exploited on September 24 and urged users to update to a newer version with a patch, while also putting out mitigation guidelines. Cybersecurity company Censys said that 3,264 hosts were vulnerable, while over 430 had been patched.