THREAT OPS › CVEs › CVE-2026-59310
CVE-2026-59310 — Broadcom VMware vCenter Path Traversal Vulnerability
Broadcom VMware vCenter contains a path traversal vulnerability which could allow a threat actor with network access to vCenter to execute arbitrary code.
Vulnerability details
- Affected productsVMware vCenter
- KEV remediation due2026-08-21
Related reporting
- August 2026 CVE Landscaperecordedfuture
- Windows IKE CVE-2026-33824 Added to CISA KEVsocradar_blog
- CISA Adds Four Known Exploited Vulnerabilities to Catalogcisa_advisories
- [CISA KEV] CVE-2026-59310 — Broadcom VMware vCenter: Broadcom VMware vCenter Path Traversal Vulnerabilitycisa_kev
- Suspected China-Nexus Actor Exploits VMware vCenter Flaw, Deploys Babuk-Derived Ransomwarethehackernews
- Critical VMware vCenter RCE flaw exploited for reverse SSH accessbleepingcomputer
- Attackers Exploit VMware vCenter Vulnerability to Gain Persistent Remote Accessthehackernews
- 3rd August – Threat Intelligence Reportcheckpoint_research
- VMware security advisory (AV26-763)cccs_ca
- Critical VMware vCenter Vulnerabilities Allow Authentication Bypass and Remote Code Execution (CVE-2026-59309, CVE-2026-59310)rapid7