VMware Security Advisory CVE-2026-59310
ID: f575bb9a-56c7-581d-8258-1e872feea532
STIX ID: report--f575bb9a-56c7-581d-8258-1e872feea532
Feed Name: Kudelski Security
Threat Score
A critical directory traversal vulnerability (CVE-2026-59310, CVSSv3 9.8) affecting VMware vCenter Syslog allows remote unauthenticated attackers to manipulate file paths and achieve arbitrary code execution on vulnerable vCenter servers; public proof-of-concept code and reports of active exploitation have been observed. Multiple VMware products and versions are listed as affected, and the advisory urges immediate patching to specified fixed versions and restricting network access to management interfaces.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.