Warning: Multiple critical vulnerabilities in the vCenter component of many VMware products, Patch Immediately!

Broadcom (advisory 29 July 2026) disclosed multiple vulnerabilities in VMware vCenter affecting VMware Cloud Foundation, vSphere Foundation, vCenter 8.0 and Telco Cloud products; two critical, remotely exploitable CVEs (CVE-2026-59309 — authentication bypass in the VMware Directory Service; CVE-2026-59310 — syslog directory traversal leading to possible remote code execution) are rated CVSS 9.8. The advisory recommends immediate patching to specified versions and enhanced monitoring; Broadcom/CCB note no public proof-of-concept or evidence of exploitation at the time of publication.