Assessing VMware vCenter RCE Impact across the Globe

Censys reports three critical VMware vCenter/ESXi vulnerabilities (notably CVE-2021-21972) that allow unauthenticated arbitrary file upload and remote code execution (SYSTEM on Windows); roughly 6,868 potentially vulnerable vCenter instances were found exposed on the Internet, exploit code is reported in the wild, and the advisory includes detection queries, mitigation steps, and a VMware workaround link.