Vulnerability intelligence
CVE-2026-59309
VMware vCenter contains an authentication bypass vulnerability in the VMware Directory Service. A malicious actor with network access to vCenter may exploit this issue to bypass authentication and gain unauthorized access to the system.
CVSS Score
9.8
Critical
EPSS — Exploit Probability
7.9%
Riskier than 94% of all CVEs · checked 2026-09-11
Exploitation
Not in CISA KEV
KEV does not include every exploited vulnerability
Remediation
unknown
Check vendor advisories
5 articles across 5 outlets · first covered Jul 29, 2026 · latest Sep 5, 2026
Coverage timeline
-
Broadcom Patches Critical VMware Flaws Enabling VM-to-Host Code Executionthehackernews.com · Sep 5, 2026
-
Patch now: critical VMware vCenter remote code flawswww.rapid7.com · Jul 30, 2026
-
Broadcom patches critical VMware flaws, including admin VM escapesecurityaffairs.com · Jul 29, 2026
-
Broadcom Warns of VMware Flaws Allowing Host Code Executionwww.securityweek.com · Jul 29, 2026
-
Critical VMware vCenter flaw lets hackers bypass authenticationsecurityonline.info · Jul 29, 2026