CVE-2025-59363 "allowed attackers with valid API credentials to enumerate and retrieve client secrets for all OIDC ...
Researchers call it an evolution from earlier versions and not a leap forward, but still advise CSOs to better secure ESXi hosts.