Broadcom Patches CVE-2026-59309 & CVE-2026-59310 (CVSS 9.8) in VMware

Broadcom released patches for multiple critical VMware vulnerabilities — most notably a CVSS 9.8 vCenter authentication bypass — that could allow attackers to gain unauthorized control of virtual environments; administrators should immediately apply the cumulative vCenter updates (9.1.0.0300, 9.0.2.0100, 8.0 U3k) and subsequent ESXi/Workstation fixes. The advisory indicates private reporting and no confirmed active exploitation, but stresses urgent patching due to the high-impact nature of the flaws.