Skip to content
OriginalSign in
Image: SecurityOnline

SecurityOnlineDo Son

Critical VMware vCenter flaw lets hackers bypass authentication

Part of the CVE-2026-59309 story · since 29 Jul

Quiet for 7 weekslast report 5 Sep5 articles5 outlets
29 Jul · SecurityOnline first15 Sep1 OctNowThis article1st of 5
  • Wed 29 Jul, 11:51 UTC. SecurityOnline, first report. Critical VMware vCenter flaw lets hackers bypass authentication. This article, 1st of 5.
  • Wed 29 Jul, 11:51 UTC. SecurityWeek, its first report on the story. Broadcom Warns of VMware Flaws Allowing Host Code Execution.
  • Wed 29 Jul, 14:07 UTC. Security Affairs, its first report on the story. Broadcom patches critical VMware flaws, including admin VM escape.
  • Thu 30 Jul, 13:01 UTC. Rapid7, its first report on the story. Patch now: critical VMware vCenter remote code flaws.
  • Sat 5 Sep, 17:01 UTC. The Hacker News, its first report on the story. Broadcom Patches Critical VMware Flaws Enabling VM-to-Host Code Execution.

Broadcom has released patches for critical vulnerabilities in VMware products, notably an authentication bypass in vCenter Server (CVE-2026-59309) which has a CVSS score of 9.8, allowing attackers unauthorized access. Other related vulnerabilities include directory traversal flaws and out-of-bounds write errors. The affected VMware products include ESX, vCenter, Workstation, and Fusion. Immediate updates are required, specifically to versions 9.1.0.0300, 9.0.2.0100, or 8.0 U3k.

The advisory emphasizes that patches are cumulative and that no workarounds exist for these critical issues. System administrators should prioritize these updates to safeguard their environments.

How the story developed

All 5 articles
Quiet for 7 weekslast report 5 Sep5 articles5 outlets

5 articles from 5 outlets since 29 Jul. Quiet since 5 Sep. This was the first report.

Now29 Jul30315 Sep627 OctFirst reportSecurityOnline · 29 Jul, 11:51Picked up againafter 5 weeks quiet
  • Wed 29 Jul, 11:51 UTC. SecurityOnline, first report. Critical VMware vCenter flaw lets hackers bypass authentication. This article, 1st of 5.
  • Wed 29 Jul, 11:51 UTC. SecurityWeek, its first report on the story. Broadcom Warns of VMware Flaws Allowing Host Code Execution.
  • Wed 29 Jul, 14:07 UTC. Security Affairs, its first report on the story. Broadcom patches critical VMware flaws, including admin VM escape.
  • Thu 30 Jul, 13:01 UTC. Rapid7, its first report on the story. Patch now: critical VMware vCenter remote code flaws.
  • Sat 5 Sep, 17:01 UTC. The Hacker News, its first report on the story. Broadcom Patches Critical VMware Flaws Enabling VM-to-Host Code Execution.
  • CVE not in KEV
  • No CVE
  • Larger: an outlet’s first report
  • Coverage over time
  • Quiet time, folded
Show all 5 articles as a list
  1. Wed 29 JulDay 03
    1. Critical VMware vCenter flaw lets hackers bypass authentication11:51 · SecurityOnline · First report · This article, 1st of 5
    2. Broadcom Warns of VMware Flaws Allowing Host Code Execution11:51 · SecurityWeek
    3. Broadcom patches critical VMware flaws, including admin VM escape14:07 · Security Affairs
  2. Thu 30 JulDay 11
    1. Patch now: critical VMware vCenter remote code flaws13:01 · Rapid7

  3. Quiet for 5 weeks

    Sat 5 SepDay 381
    1. Broadcom Patches Critical VMware Flaws Enabling VM-to-Host Code Execution17:01 · The Hacker News · Picked up again

Sources

CyberSIXTSignal over noise
Updated AboutDevelopersSign in