60
Broadcom Patches Critical ESXi Vulnerability Enabling Host Code Execution
60
60
60
Broadcom Issues Patches for VMware NSX and vCenter Security Flaws
60
60
60
60
60
U.S. CISA adds a flaw in Broadcom VMware vCenter Server to its Known Exploited Vulnerabilities catalog
60
60
60
60
60
60
Broadcom Patches VMware Aria Flaws
60
60
CISA Adds Actively Exploited VMware vCenter Flaw CVE-2024
60
Auth bypass CVE-2025
60
Recently disclosed VMware vCenter Server bugs are actively exploited in attacks
60
60
Attackers Exploit VMware vCenter Vulnerability to Gain Persistent Remote Access
Attackers actively exploit critical VMware vCenter flaw CVE-2026-59310, installing reverse_ssh backdoors on 361 hosts across 47 countries.
QUIRSO observed active exploitation of CVE-2026-59310 (CVSS 9.8), a directory-traversal flaw in VMware vCenter allowing arbitrary code execution, patched by Broadcom in late July. Attack chains deploy a malicious cron job running the open-source reverse_ssh tool for persistence, with compromised systems phoning home starting August 3, five days after disclosure. Forensics show 361 unique victim IPs in 47 countries, mostly Germany, the U.S., Turkey, Iran, and France, with the actor suspected to be an APT. Separately, Defused Cyber reports rising scanning indicative of exploitation of related CVE-2026-59309, an unauthenticated auth bypass in vmdir.
88
60
60
60
60
vCenter Flaw Exploited Just Five Days After Disclosure
Attackers began exploiting critical vCenter flaw CVE-2026-59310 five days after Broadcom's disclosure, putting enterprise VMware deployments at risk.
Attackers exploited a critical-severity flaw in VMware vCenter, tracked as CVE-2026-59310, just five days after Broadcom disclosed it. vCenter is the management platform for large enterprise VMware virtualization estates, so active exploitation exposes a broad installed base. Defenders running vCenter should prioritize applying Broadcom's patch.
78
60
60
U.S. CISA adds Linux kernel and VMware ESXi and Workstation flaws to its Known Exploited Vulnerabilities catalog
60
60
60
60
60
⚡ Weekly Recap: SharePoint 0-Day, Chrome Exploit, macOS Spyware, NVIDIA Toolkit RCE and More
60
March 2026 CVE Landscape: 31 High-Impact Vulnerabilities Identified, Interlock Ransomware Group Exploits Cisco FMC Zero
60
60
60
60
January 2026 CVE Landscape: 23 Critical Vulnerabilities Mark 5% Increase, APT28 Exploits Microsoft Office Zero
60