by Kastro
Paper/Archive/CVE-2026-59310

CVE-2026-59310

VMware Cloud Foundation — vCenter directory-traversal vulnerability

KEV · due 21 Augransomware useEPSS 3%public exploitSSVC actCVSS 9.8
critical.is priorityof 100
96
CVSS 9.8 (CNA)9.8 / 10 × 3029.4In CISA KEV+3030.0EPSS percentile 85.1.851 × 2017.0Exploit: SSVC active+1010.0SSVC exploitation: active+1010.0
Description · from the CVE record

VMware vCenter contains a directory traversal vulnerability in the Syslog server. A malicious actor with network access to vCenter may exploit this issue to execute arbitrary code.

Affected

ProductAffectedFixed inSource
Cloud Foundation9.1.x.x–CNA
Cloud Foundation9.0.x.x–CNA
Cloud Foundation5.x–CNA
vSphere Foundation9.1.x.x–CNA
vSphere Foundation9.0.x.x–CNA
vCenter9.1.x.x – < 9.1.0.03009.1.0.0300CNA
vCenter9.0.x.x – < 9.0.2.01009.0.2.0100CNA
vCenter8.0 – < 8.0 U3k8.0 U3kCNA
Telco Cloud Infrastructure3.0–CNA
Telco Cloud Platform5.1.x–CNA
Telco Cloud Platform5.0.x–CNA
Telco Cloud Platform4.x–CNA

Scores by source

vmware (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: active · Automatable: yes · Technical impact: total

References

refsupport.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/38017writeupmedium.com/@quirso_de/global-exploitation-of-cve-2026-59310-by-suspected-chinese-nexus-apt-related-cve-2026-59309-443a79e1466dwriteupmedium.com/@quirso_de/active-exploitation-of-cve-2026-59310-361-victim-ips-across-47-countries-9783187cc6ffrefcisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-59310kevcisa.gov/known-exploited-vulnerabilities-catalog