Skip to content
Sign in
CVE-2026-593109.8CriticalCWE-22

Broadcom VMware vCenter Path Traversal Vulnerability

Broadcom · VMware vCenter

Exploited in the wild · in CISA KEV since 18 AugVendor fix available
2.6%probability of exploitation in the next 30 days
85th percentile
050100

Higher than 85% of scored CVEs

9.8CriticalCVSS 3.1
LowCrit.

Federal deadline

CISA KEV · added 18 Aug · catalogue entry

Passed 67 days ago

DescriptionNVD

VMware vCenter contains a directory traversal vulnerability in the Syslog server. A malicious actor with network access to vCenter may exploit this issue to execute arbitrary code.

CISA required action

Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.

Coverage11 articles · 7 outlets

One row per outlet, in order of first report. First in our coverage: SecurityWeek, 29 Jul.

Full timeline
Quiet for 7 weekslast report 5 Sep11 articles7 outlets
29 Jul · SecurityWeek first15 Sep1 OctNow
  • Wed 29 Jul, 11:51 UTC. SecurityWeek, first report. Broadcom Warns of VMware Flaws Allowing Host Code Execution. Cites a CVE in CISA KEV.
  • Wed 29 Jul, 14:07 UTC. Security Affairs, its first report on the story. Broadcom patches critical VMware flaws, including admin VM escape. Cites a CVE in CISA KEV.
  • Thu 30 Jul, 13:01 UTC. Rapid7, its first report on the story. Patch now: critical VMware vCenter remote code flaws. Cites a CVE in CISA KEV.
  • Thu 13 Aug, 09:21 UTC. SecurityWeek. VMware vCenter CVE-2026-59310 flaw lets APT groups run code. Cites a CVE in CISA KEV.
  • Thu 13 Aug, 14:31 UTC. Infosecurity, its first report on the story. VMware vCenter CVE-2026-59310 flaw exploited worldwide within days. Cites a CVE in CISA KEV.
  • Tue 18 Aug, 19:42 UTC. CISA, its first report on the story. CISA Adds Critical VMware vCenter Flaw CVE-2026-59310 to KEV. Cites a CVE in CISA KEV.
  • Wed 19 Aug, 00:03 UTC. CISA. CISA flags VMware vCenter path traversal bug in KEV catalog.. Cites a CVE in CISA KEV.
  • Wed 19 Aug, 05:02 UTC. SecurityOnline, its first report on the story. CISA KEV Adds Four Exploited Flaws in SharePoint, vCenter. Cites a CVE in CISA KEV.
  • Wed 19 Aug, 08:01 UTC. Security Affairs. U.S. CISA adds Apple macOS, Microsoft SharePoint, Broadcom VMware vCenter, and Microsoft IKE flaws to its Known Exploited Vulnerabilities catalog. Cites a CVE in CISA KEV.
  • Wed 19 Aug, 14:02 UTC. SecurityOnline. Telegram seeks .gram domain as critical zero day exploits surge. Cites a CVE in CISA KEV.
  • Sat 5 Sep, 17:01 UTC. The Hacker News, its first report on the story. Broadcom Patches Critical VMware Flaws Enabling VM-to-Host Code Execution. Cites a CVE in CISA KEV.
All coveragerunning totalAdded to CISA KEV · 18 Aug11SecurityWeek2Security Af…2Rapid71Infosecurity1CISA2SecurityOnl…2The Hacker…130 Jul30 Aug30 SepNow
  • First report
  • Article
  • Official notice
  • Running total

Added to CISA KEV

Show as table
11 articles about CVE-2026-59310 from 7 outlets
Published (UTC)OutletHeadline
29 Jul 11:51SecurityWeekBroadcom Warns of VMware Flaws Allowing Host Code Execution
29 Jul 14:07Security AffairsBroadcom patches critical VMware flaws, including admin VM escape
30 Jul 13:01Rapid7Patch now: critical VMware vCenter remote code flaws
13 Aug 09:21SecurityWeekVMware vCenter CVE-2026-59310 flaw lets APT groups run code
13 Aug 14:31InfosecurityVMware vCenter CVE-2026-59310 flaw exploited worldwide within days
18 Aug 19:42CISACISA Adds Critical VMware vCenter Flaw CVE-2026-59310 to KEV
19 Aug 00:03CISACISA flags VMware vCenter path traversal bug in KEV catalog.
19 Aug 05:02SecurityOnlineCISA KEV Adds Four Exploited Flaws in SharePoint, vCenter
19 Aug 08:01Security AffairsU.S. CISA adds Apple macOS, Microsoft SharePoint, Broadcom VMware vCenter, and Microsoft IKE flaws to its Known Exploited Vulnerabilities catalog
19 Aug 14:02SecurityOnlineTelegram seeks .gram domain as critical zero day exploits surge
5 Sep 17:01The Hacker NewsBroadcom Patches Critical VMware Flaws Enabling VM-to-Host Code Execution
  1. Broadcom Patches Critical VMware Flaws Enabling VM-to-Host Code Execution
    The Hacker News · mentions it in passing
  2. Telegram seeks .gram domain as critical zero day exploits surge
    SecurityOnline · mentions it in passing
  3. U.S. CISA adds Apple macOS, Microsoft SharePoint, Broadcom VMware vCenter, and Microsoft IKE flaws to its Known Exploited Vulnerabilities catalog
    Security Affairs · mentions it in passing
  4. CISA KEV Adds Four Exploited Flaws in SharePoint, vCenter
    SecurityOnline · mentions it in passing
  5. CISA flags VMware vCenter path traversal bug in KEV catalog.
    CISA · official notice
  6. CISA Adds Critical VMware vCenter Flaw CVE-2026-59310 to KEV
    CISA · official notice
  7. VMware vCenter CVE-2026-59310 flaw exploited worldwide within days
    Infosecurity
  8. VMware vCenter CVE-2026-59310 flaw lets APT groups run code
    SecurityWeek
Show 3 more

New articles also arrive in the RSS feed.

References

CyberSIXTSignal over noise
Updated AboutDevelopersSign in