Researchers Find VMware vCenter Vulnerability Exploited in Countries Around the World
NEOSEC enrichment — no mirror of the original source
The QUIRSO Threat Research team has observed a campaign that is actively exploiting a known vulnerability in VMware vCenter Syslog server. The flaw, CVE-2026–59310, CVSS score 9.8, is a critical directory traversal issue that could be explo
Source: SANS NewsBites. For licensing reasons NEOSEC Intel does not mirror the full text verbatim. The full text and expert commentary are available at the original source.
Editorial context in the original issue
The SANS NewsBites issue carries commentary by: Honan, Neely, Skoudis.
More on vCenter
Other advisories
- HighCVE-2026-41012Eine Schwachstelle bei der Abfangung von Verkehr im BOSH Director vCenter CPI ermöglicht es Angreifern, die sich zwischen dem BOSH Director ...
- CriticalCVE-2026-53475Assisted Migration Agent: Hardcoded insecure Transport Layer Security (TLS) connections during vCenter communication in github.com/kubev2v/assisted-migration-agent
- CriticalCVE-2026-59310Broadcom VMware vCenter: Broadcom VMware vCenter Path Traversal Vulnerability
- CriticalCVE-2026-59309VMware vCenter: fehlerhafte Implementierung der Authentifizierung
- CriticalCVE-2026-59309VMware vCenter: fehlerhafte Implementierung der Authentifizierung
- CriticalCVE-2026-59310Broadcom VMware vCenter: Pfadüberschreitung (Path Traversal)
- CriticalCVE-2026-59310Broadcom VMware vCenter: Pfadüberschreitung (Path Traversal)
- CriticalCVE-2026-53475Assisted Migration Agent: Hardcoded insecure Transport Layer Security (TLS) connections during vCenter communication
Other news entries
- VMware Produkte: Mehrere SchwachstellenVulnerabilityBSI CERT-Bund
- CISA: Critical VMware RCE flaw now exploited by ransomware gangsNewsBleepingComputer
- Critical macOS, SharePoint, vCenter, and Microsoft IKE Flaws Under Active ExploitationNewsThe Hacker News
- Suspected China-Nexus Actor Exploits VMware vCenter Flaw, Deploys Babuk-Derived RansomwareNewsThe Hacker News
- Global Threat Campaign Hits Critical VMware vCenter FlawNewsDark Reading
- Critical VMware vCenter RCE flaw exploited for reverse SSH accessNewsBleepingComputer
- Critical VMware vCenter Vulnerability in Attackers’ CrosshairsNewsSecurityWeek
- Attackers Exploit VMware vCenter Vulnerability to Gain Persistent Remote AccessNewsThe Hacker News
ID