Physical Address
304 North Cardinal St.
Dorchester Center, MA 02124
Physical Address
304 North Cardinal St.
Dorchester Center, MA 02124
Run secure, stable, enterprise-ready vSphere 8 infrastructure. Download the official ESXi and vCenter Server files for Update 3k and patch against the latest disclosed CVEs.
Get the verified ESXi and vCenter files from VMoreCloud’s reference links.
vSphere 8 Update 3k is a security patch release from Broadcom, published 29 July 2026. It updates ESXi to build 25595708 and vCenter Server to build 25600417, closing three disclosed CVEs. It introduces no new features — it exists purely to keep production hypervisors and management servers current on security.
“This live-patchable release resolves CVE-2026-47876 and its impact on Broadcom products.”
There are no new capabilities in this release — the value is entirely security. Here is what changed at the build level:
| Item | ESXi 8.0U3k | vCenter 8.0U3k |
|---|---|---|
| Build number | 25595708 | 25600417 |
| CVEs fixed | CVE-2026-47876 | CVE-2026-59309, CVE-2026-59310 |
| Category | Security, Critical | Security |
| Live patchable | Yes (vLCM image clusters) | Not applicable |
VMware-VCSA-all-8.0.3-25600417.isoVMware-VMvisor-Installer-8.0U3i-25205845.x86_64.isoVMware-ESXi-8.0U3k-25595708-depot.zipUpdate 3k applies to hosts and vCenter instances already licensed for vSphere 8, regardless of edition — it does not change licensing tiers.
# Windows PowerShell
Get-FileHash .\VMware-ESXi-8.0U3k-25595708-depot.zip -Algorithm SHA256
Get-FileHash .\VMware-VCSA-all-8.0.3-25600417.iso -Algorithm SHA256
# Linux / macOS
sha256sum VMware-ESXi-8.0U3k-25595708-depot.zip
| File | Expected SHA256 |
|---|---|
| ESXi depot ZIP | d127e29ef535a9bd178bd0f8a73754dd247cda18b3d0cbcce629dea0b8796a99 |
| vCenter patch ISO | a74f93a8a4e50dabbbc8db8c64767cd9a8647c78c56003b541a41d4984728ba4 |
https://<vcenter-fqdn>:5480 and sign in as root.Preferred: edit the vLCM cluster image to ESXi 8.0U3k, run a compliance check, and remediate. For a standalone host with ESXCLI:
esxcli system maintenanceMode set --enable true
esxcli software sources profile list -d /vmfs/volumes/<datastore>/VMware-ESXi-8.0U3k-25595708-depot.zip
esxcli software profile update -d /vmfs/volumes/<datastore>/VMware-ESXi-8.0U3k-25595708-depot.zip -p ESXi-8.0U3k-25595708-standard
reboot
After the reboot, exit maintenance mode and confirm with vmware -vl that the host reports build 25595708.
The files are hosted on the Broadcom Support Portal and require a registered account with an active entitlement.
Update vCenter Server first. vCenter must always be at the same version or newer than the ESXi hosts it manages.
Broadcom does not build a new full installer ISO for every patch. 8.0U3i (build 25205845) is the most recent full installer ISO at the time of writing; the 8.0U3k security fixes are delivered through the depot ZIP and vCenter patch ISO above. Fresh installs from the 8.0U3i ISO should be patched to 8.0U3k afterward using the depot file.
Not yet. Broadcom lists this upgrade path as unsupported today, with a supported path planned for a future 9.1.x release.
We have detected that you are using extensions to block ads. Please support us by disabling these ads blocker.