vCenter Flaw Exploited Just Five Days After Disclosure
Attackers began exploiting critical vCenter flaw CVE-2026-59310 five days after Broadcom's disclosure, putting enterprise VMware deployments at risk.
Attackers exploited a critical-severity flaw in VMware vCenter, tracked as CVE-2026-59310, just five days after Broadcom disclosed it. vCenter is the management platform for large enterprise VMware virtualization estates, so active exploitation exposes a broad installed base. Defenders running vCenter should prioritize applying Broadcom's patch.
- Critical vCenter flaw CVE-2026-59310 is being actively exploited
- Exploitation began five days after Broadcom's disclosure
- vCenter manages enterprise VMware virtualization environments at scale
- Rapid exploitation shows short patch windows for virtualization infrastructure
- CVEs
- CVE-2026-59310
- Products
- VMware vCenter
- Organizations
- Broadcom
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-59310 | Unauthenticated Path Traversal RCE in Broadcom VMware vCenter Server Syslog | 9.8 | 3% | KEVRansomwarePoC ×2 | KEV |
From the original article
Attackers exploited a critical-severity vCenter flaw five days after Broadcom disclosed it
infosecurity-magazine.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.