Vulnerability-Lookup

CVE-2026-59310 (GCVE-0-2026-59310)

Vulnerability from cvelistv5 – Published: 2026-07-30 12:19 – Updated: 2026-09-12 03:55

CISA ENISA Previdian

Title

vCenter directory-traversal vulnerability

Summary

VMware vCenter contains a directory traversal vulnerability in the Syslog server. A malicious actor with network access to vCenter may exploit this issue to execute arbitrary code.

Severity

9.8 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

SSVC

Exploitation: active Automatable: yes Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-07-29 00:00 UTC

CWE

CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Assigner

vmware mitre root

References

4 references

URL	Tags
https://support.broadcom.com/web/ecx/support-cont…
https://medium.com/@quirso_de/global-exploitation…	third-party-advisory
https://medium.com/@quirso_de/active-exploitation…	third-party-advisory
https://www.cisa.gov/known-exploited-vulnerabilit…	government-resource

Impacted products

5 products

Vendor	Product	Version	CPE status
VMware	Cloud Foundation	Affected: 9.1.x.x Affected: 9.0.x.x Affected: 5.x	guessed
VMware	vSphere Foundation	Affected: 9.1.x.x Affected: 9.0.x.x	guessed
VMware	vCenter	Affected: 9.1.x.x , < 9.1.0.0300 (custom) Affected: 9.0.x.x , < 9.0.2.0100 (custom) Affected: 8.0 , < 8.0 U3k (custom)	guessed
VMware	Telco Cloud Infrastructure	Affected: 3.0	guessed
VMware	Telco Cloud Platform	Affected: 5.1.x Affected: 5.0.x Affected: 4.x Affected: 3.0	guessed

Date Public

2026-07-29 04:30

CISA

Known Exploited Vulnerability - GCVE BCP-07 Compliant

KEV entry ID: 79b7d8f3-d68c-4985-9c27-f9f188316d34

Vulnerability ID: CVE-2026-59310

Status: Confirmed

Status Updated: 2026-08-18 00:00 UTC

Exploited: Yes

Timestamps

First Seen: 2026-08-18

Asserted: 2026-08-18

Scope

Notes: Broadcom VMware vCenter Path Traversal Vulnerability | Affected: Broadcom / VMware vCenter | Description: Broadcom VMware vCenter contains a path traversal vulnerability which could allow a threat actor with network access to vCenter to execute arbitrary code. | Required action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines. | Due date: 2026-08-21 | Known ransomware campaign use (KEV): Unknown | Notes (KEV): https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/38017 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-59310

Evidence

Type: Vendor Report

Signal: Successful Exploitation

Confidence: 80%

Source: cisa-kev

Details

Cwes	CWE-22
Feed	CISA Known Exploited Vulnerabilities Catalog
Product	VMware vCenter
Due Date	2026-08-21
Date Added	2026-08-18
Vendorproject	Broadcom
Vulnerabilityname	Broadcom VMware vCenter Path Traversal Vulnerability
Knownransomwarecampaignuse	Unknown

References

CVE-2026-59310

Created: 2026-08-18 18:00 UTC | Updated: 2026-08-18 18:00 UTC

ENISA

Known Exploited Vulnerability - GCVE BCP-07 Compliant

KEV entry ID: 478b7162-ca91-4b7b-8790-955137b4369e

Vulnerability ID: CVE-2026-59310

Status: Confirmed

Status Updated: 2026-08-10 00:00 UTC

Exploited: Yes

Timestamps

First Seen: 2026-08-10

Asserted: 2026-08-10

Scope

Notes: Affected: VMware / vCenter | Description: Directory traversal vulnerability in the Syslog server. A malicious actor with network access to vCenter may exploit this issue to execute arbitrary code. | Patched since: 2026/08/03 | Exploitation type: APT | CWEs: CWE-22 | Origin source: ENISA | Notes: https://medium.com/@quirso_de/active-exploitation-of-cve-2026-59310-361-victim-ips-across-47-countries-9783187cc6ff

Evidence

Type: Csirt Report

Signal: Successful Exploitation

Confidence: 75%

Source: enisa-cnw-kev

Details

Cwes	CWE-22
Euvd	EUVD-2026-51097
Notes	https://medium.com/@quirso_de/active-exploitation-of-cve-2026-59310-361-victim-ips-across-47-countries-9783187cc6ff
Catalog	ENISA / EU CSIRTs Network (CNW) KEV JSON
Product	vCenter
Datereported	2026/08/10
Originsource	ENISA
Patchedsince	2026/08/03
Vendorproject	VMware
Exploitationtype	APT
Vulnerabilityname
Threatactorsexploiting

References

Created: 2026-08-20 08:11 UTC | Updated: 2026-08-20 08:11 UTC

Previdian

Known Exploited Vulnerability - GCVE BCP-07 Compliant

KEV entry ID: 1d270acf-8da1-4944-ae6c-5cdc7f627315

Vulnerability ID: CVE-2026-59310

Status: Confirmed

Status Updated: 2026-08-12 10:47 UTC

Exploited: Yes

Timestamps

First Seen: 2026-08-12

Asserted: 2026-08-12

Scope

Notes: vCenter directory-traversal vulnerability | Affected: VMware / Cloud Foundation, vSphere Foundation, vCenter, Telco Cloud Infrastructure, Telco Cloud Platform | CVSS: 9.8 (CRITICAL) | EPSS: 0.0114 | Used in malware: unknown | Not yet in CISA KEV: True

Evidence

Type: Public Report

Signal: Successful Exploitation

Confidence: 70%

Source: kevintel

Details

Feed	KEVIntel (kevintel.com)
Title	vCenter directory-traversal vulnerability
Vendor	VMware
Product	Cloud Foundation, vSphere Foundation, vCenter, Telco Cloud Infrastructure, Telco Cloud Platform
Added Date	2026-08-12T10:47:00.000Z
Cvss Score	9.8
Epss Score	0.0114
Cvss Severity	CRITICAL
Epss Percentile	0.63646
Used In Malware	unknown
Ahead Of Cisa Kev	None
Not Yet In Cisa Kev	True

References

Created: 2026-08-12 11:00 UTC | Updated: 2026-08-12 11:00 UTC

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-59310",
                "options": [
                  {
                    "Exploitation": "active"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-07-29T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          },
          {
            "other": {
              "content": {
                "dateAdded": "2026-08-18",
                "reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-59310"
              },
              "type": "kev"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-12T03:55:18.047Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "third-party-advisory"
            ],
            "url": "https://medium.com/@quirso_de/global-exploitation-of-cve-2026-59310-by-suspected-chinese-nexus-apt-related-cve-2026-59309-443a79e1466d"
          },
          {
            "tags": [
              "third-party-advisory"
            ],
            "url": "https://medium.com/@quirso_de/active-exploitation-of-cve-2026-59310-361-victim-ips-across-47-countries-9783187cc6ff"
          },
          {
            "tags": [
              "government-resource"
            ],
            "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-59310"
          }
        ],
        "timeline": [
          {
            "lang": "en",
            "time": "2026-08-18T00:00:00.000Z",
            "value": "CVE-2026-59310 added to CISA KEV"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Cloud Foundation",
          "vendor": "VMware",
          "versions": [
            {
              "status": "affected",
              "version": "9.1.x.x"
            },
            {
              "status": "affected",
              "version": "9.0.x.x"
            },
            {
              "status": "affected",
              "version": "5.x"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "vSphere Foundation",
          "vendor": "VMware",
          "versions": [
            {
              "status": "affected",
              "version": "9.1.x.x"
            },
            {
              "status": "affected",
              "version": "9.0.x.x"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "vCenter",
          "vendor": "VMware",
          "versions": [
            {
              "lessThan": "9.1.0.0300",
              "status": "affected",
              "version": "9.1.x.x",
              "versionType": "custom"
            },
            {
              "lessThan": "9.0.2.0100",
              "status": "affected",
              "version": "9.0.x.x",
              "versionType": "custom"
            },
            {
              "lessThan": "8.0 U3k",
              "status": "affected",
              "version": "8.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Telco Cloud Infrastructure",
          "vendor": "VMware",
          "versions": [
            {
              "status": "affected",
              "version": "3.0"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Telco Cloud Platform",
          "vendor": "VMware",
          "versions": [
            {
              "status": "affected",
              "version": "5.1.x"
            },
            {
              "status": "affected",
              "version": "5.0.x"
            },
            {
              "status": "affected",
              "version": "4.x"
            },
            {
              "status": "affected",
              "version": "3.0"
            }
          ]
        }
      ],
      "datePublic": "2026-07-29T04:30:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "VMware vCenter contains a directory traversal vulnerability in the Syslog server.\u0026nbsp;\u003cspan\u003eA malicious actor with network access to vCenter\u0026nbsp;may exploit this issue to execute arbitrary code.\u003c/span\u003e\u003cbr\u003e\u003cbr\u003e"
            }
          ],
          "value": "VMware vCenter contains a directory traversal vulnerability in the Syslog server.\u00a0A malicious actor with network access to vCenter\u00a0may exploit this issue to execute arbitrary code."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-22",
              "description": "CWE-22 Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-07-30T12:28:20.696Z",
        "orgId": "dcf2e128-44bd-42ed-91e8-88f912c1401d",
        "shortName": "vmware"
      },
      "references": [
        {
          "url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/38017"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "vCenter directory-traversal vulnerability",
      "x_generator": {
        "engine": "Vulnogram 1.0.4"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "dcf2e128-44bd-42ed-91e8-88f912c1401d",
    "assignerShortName": "vmware",
    "cveId": "CVE-2026-59310",
    "datePublished": "2026-07-30T12:19:25.296Z",
    "dateReserved": "2026-07-04T18:13:57.026Z",
    "dateUpdated": "2026-09-12T03:55:18.047Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "cisa_known_exploited": {
      "cveID": "CVE-2026-59310",
      "cwes": [
        "CWE-22"
      ],
      "dateAdded": "2026-08-18",
      "dueDate": "2026-08-21",
      "forensicTriage": "Yes",
      "knownRansomwareCampaignUse": "Unknown",
      "notes": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/38017 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-59310",
      "product": "VMware vCenter",
      "requiredAction": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA\u2019s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA\u2019s \u201cForensics Triage Requirements\u201d (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset\u0027s internet exposure and ensuring adherence to BOD 26-04 patching guidelines.",
      "shortDescription": "Broadcom VMware vCenter contains a path traversal vulnerability which could allow a threat actor with network access to vCenter to execute arbitrary code.",
      "vendorProject": "Broadcom",
      "vulnerabilityName": "Broadcom VMware vCenter Path Traversal Vulnerability"
    },
    "epss": {
      "cve": "CVE-2026-59310",
      "date": "2026-09-17",
      "epss": "0.45878",
      "percentile": "0.98743"
    },
    "nvd": {
      "cve": {
        "affected": [
          {
            "affectedData": [
              {
                "defaultStatus": "unaffected",
                "product": "Cloud Foundation",
                "vendor": "VMware",
                "versions": [
                  {
                    "status": "affected",
                    "version": "9.1.x.x"
                  },
                  {
                    "status": "affected",
                    "version": "9.0.x.x"
                  },
                  {
                    "status": "affected",
                    "version": "5.x"
                  }
                ]
              },
              {
                "defaultStatus": "unaffected",
                "product": "vSphere Foundation",
                "vendor": "VMware",
                "versions": [
                  {
                    "status": "affected",
                    "version": "9.1.x.x"
                  },
                  {
                    "status": "affected",
                    "version": "9.0.x.x"
                  }
                ]
              },
              {
                "defaultStatus": "unaffected",
                "product": "vCenter",
                "vendor": "VMware",
                "versions": [
                  {
                    "lessThan": "9.1.0.0300",
                    "status": "affected",
                    "version": "9.1.x.x",
                    "versionType": "custom"
                  },
                  {
                    "lessThan": "9.0.2.0100",
                    "status": "affected",
                    "version": "9.0.x.x",
                    "versionType": "custom"
                  },
                  {
                    "lessThan": "8.0 U3k",
                    "status": "affected",
                    "version": "8.0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "defaultStatus": "unaffected",
                "product": "Telco Cloud Infrastructure",
                "vendor": "VMware",
                "versions": [
                  {
                    "status": "affected",
                    "version": "3.0"
                  }
                ]
              },
              {
                "defaultStatus": "unaffected",
                "product": "Telco Cloud Platform",
                "vendor": "VMware",
                "versions": [
                  {
                    "status": "affected",
                    "version": "5.1.x"
                  },
                  {
                    "status": "affected",
                    "version": "5.0.x"
                  },
                  {
                    "status": "affected",
                    "version": "4.x"
                  },
                  {
                    "status": "affected",
                    "version": "3.0"
                  }
                ]
              }
            ],
            "source": "security@vmware.com"
          }
        ],
        "cisaActionDue": "2026-08-21",
        "cisaExploitAdd": "2026-08-18",
        "cisaRequiredAction": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA\u2019s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA\u2019s \u201cForensics Triage Requirements\u201d (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset\u0027s internet exposure and ensuring adherence to BOD 26-04 patching guidelines.",
        "cisaVulnerabilityName": "Broadcom VMware vCenter Path Traversal Vulnerability",
        "configurations": [
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:a:vmware:vcenter_server:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "6B17478A-E6D9-4C6B-8810-7E1BC9E7392F",
                    "versionEndExcluding": "8.0",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:vmware:vcenter_server:8.0:-:*:*:*:*:*:*",
                    "matchCriteriaId": "CC974CA1-88D3-42E4-BF1F-28870F8171B5",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:vmware:vcenter_server:8.0:a:*:*:*:*:*:*",
                    "matchCriteriaId": "EFE63984-F69B-4593-9AEC-D179D6D98B08",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:vmware:vcenter_server:8.0:b:*:*:*:*:*:*",
                    "matchCriteriaId": "34D1F3B3-8E3F-4E4D-8EE6-2F593663B5CC",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:vmware:vcenter_server:8.0:c:*:*:*:*:*:*",
                    "matchCriteriaId": "16F3D992-9F48-4604-9AAF-DC2D1CE98BE2",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:vmware:vcenter_server:8.0:update1:*:*:*:*:*:*",
                    "matchCriteriaId": "C745A7E6-4760-48CD-B7C4-1C2C20217F21",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:vmware:vcenter_server:8.0:update1a:*:*:*:*:*:*",
                    "matchCriteriaId": "A5522514-8ED9-45DB-9036-33FE40D77E7D",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:vmware:vcenter_server:8.0:update1b:*:*:*:*:*:*",
                    "matchCriteriaId": "8C27C660-E917-4944-8B4C-41D9622B76D7",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:vmware:vcenter_server:8.0:update1c:*:*:*:*:*:*",
                    "matchCriteriaId": "56CFB469-B3E6-4503-A47C-D18206D4D19A",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:vmware:vcenter_server:8.0:update1d:*:*:*:*:*:*",
                    "matchCriteriaId": "67024A43-9E13-4F4E-B711-731792DA3840",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:vmware:vcenter_server:8.0:update1e:*:*:*:*:*:*",
                    "matchCriteriaId": "1188E9D6-53AD-40D0-8146-3728D071008D",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:vmware:vcenter_server:8.0:update2:*:*:*:*:*:*",
                    "matchCriteriaId": "604F559F-1775-4F29-996E-9079B99345B6",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:vmware:vcenter_server:8.0:update2a:*:*:*:*:*:*",
                    "matchCriteriaId": "61DC9400-5AEE-49AC-9925-0A96E32BD8C0",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:vmware:vcenter_server:8.0:update2b:*:*:*:*:*:*",
                    "matchCriteriaId": "98C1B77E-AB0E-4E8A-8294-2D3D230CDF9B",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:vmware:vcenter_server:8.0:update2c:*:*:*:*:*:*",
                    "matchCriteriaId": "8EC8BEF1-7908-46C0-841A-834778D1A863",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:vmware:vcenter_server:8.0:update2d:*:*:*:*:*:*",
                    "matchCriteriaId": "89D5A7F9-3183-4EE7-828C-13BB9169E199",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:vmware:vcenter_server:8.0:update2e:*:*:*:*:*:*",
                    "matchCriteriaId": "9EB94E5F-9AFB-471C-887C-4C53B5169347",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:vmware:vcenter_server:8.0:update3:*:*:*:*:*:*",
                    "matchCriteriaId": "D8C5E404-9A83-472C-AE97-25DAE332C327",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:vmware:vcenter_server:8.0:update3a:*:*:*:*:*:*",
                    "matchCriteriaId": "78312C9E-4653-4C79-9886-A7A63DB98262",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:vmware:vcenter_server:8.0:update3b:*:*:*:*:*:*",
                    "matchCriteriaId": "722B1899-0229-4BEA-94C4-1E475406E7AF",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:vmware:vcenter_server:8.0:update3c:*:*:*:*:*:*",
                    "matchCriteriaId": "E1EA338E-4263-42A9-8E91-C3D91A7F8AD1",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:vmware:vcenter_server:8.0:update3d:*:*:*:*:*:*",
                    "matchCriteriaId": "3EFDF451-E83B-4340-BF06-AA017B042841",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:vmware:vcenter_server:8.0:update3e:*:*:*:*:*:*",
                    "matchCriteriaId": "20D28DF8-BAD2-4613-9325-A55B06FB1F21",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:vmware:vcenter_server:8.0:update3g:*:*:*:*:*:*",
                    "matchCriteriaId": "FF925343-3889-46EC-87C5-82B8C3DC33ED",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:vmware:vcenter_server:8.0:update3h:*:*:*:*:*:*",
                    "matchCriteriaId": "D9BD9CEF-D37E-45AF-883F-120C32849E14",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:vmware:vcenter_server:8.0:update3i:*:*:*:*:*:*",
                    "matchCriteriaId": "1D402845-1C50-40CE-BAA2-CDD5615B660D",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:vmware:vcenter_server:8.0:update3j:*:*:*:*:*:*",
                    "matchCriteriaId": "9552133F-9C74-4368-857A-BAFA182BE8EA",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:a:vmware:telco_cloud_infrastructure:3.0:*:*:*:*:*:*:*",
                    "matchCriteriaId": "D11103A7-6AB5-4E78-BE11-BC2A04A09F19",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:a:vmware:telco_cloud_platform:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "320FDFEE-22D1-4650-B177-BF7B1E750D45",
                    "versionEndIncluding": "5.2",
                    "versionStartIncluding": "3.0",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:a:vmware:vcenter_server:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "45C693CF-0995-4332-9B1E-018EBCDAF83A",
                    "versionEndExcluding": "9.0.2.0100",
                    "versionStartIncluding": "9.0",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:vmware:vcenter_server:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "C014E906-B622-424E-BFF9-660187C73C54",
                    "versionEndExcluding": "9.1.0.0300",
                    "versionStartIncluding": "9.1",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:a:vmware:cloud_foundation:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "31A7BB38-3238-413E-9736-F1A165D40867",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:a:vmware:vsphere_foundation:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "03AD0AB7-45A3-4DC7-923D-1166346EEA12",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "VMware vCenter contains a directory traversal vulnerability in the Syslog server.\u00a0A malicious actor with network access to vCenter\u00a0may exploit this issue to execute arbitrary code."
          }
        ],
        "id": "CVE-2026-59310",
        "lastModified": "2026-08-19T04:17:24.940",
        "metrics": {
          "cvssMetricV31": [
            {
              "cvssData": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "HIGH",
                "baseScore": 9.8,
                "baseSeverity": "CRITICAL",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "NONE",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
                "version": "3.1"
              },
              "exploitabilityScore": 3.9,
              "impactScore": 5.9,
              "source": "security@vmware.com",
              "type": "Secondary"
            }
          ],
          "ssvcV203": [
            {
              "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "ssvcData": {
                "id": "CVE-2026-59310",
                "options": [
                  {
                    "exploitation": "active"
                  },
                  {
                    "automatable": "yes"
                  },
                  {
                    "technicalImpact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-07-29T00:00:00+00:00",
                "version": "2.0.3"
              }
            }
          ]
        },
        "published": "2026-07-30T13:16:53.993",
        "references": [
          {
            "source": "security@vmware.com",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/38017"
          },
          {
            "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
            "tags": [
              "Third Party Advisory"
            ],
            "url": "https://medium.com/@quirso_de/active-exploitation-of-cve-2026-59310-361-victim-ips-across-47-countries-9783187cc6ff"
          },
          {
            "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
            "tags": [
              "Third Party Advisory"
            ],
            "url": "https://medium.com/@quirso_de/global-exploitation-of-cve-2026-59310-by-suspected-chinese-nexus-apt-related-cve-2026-59309-443a79e1466d"
          },
          {
            "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
            "tags": [
              "US Government Resource"
            ],
            "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-59310"
          }
        ],
        "sourceIdentifier": "security@vmware.com",
        "vulnStatus": "Analyzed",
        "weaknesses": [
          {
            "description": [
              {
                "lang": "en",
                "value": "CWE-22"
              }
            ],
            "source": "security@vmware.com",
            "type": "Secondary"
          }
        ]
      }
    },
    "vulnrichment": {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2026-59310",
                    "options": [
                      {
                        "Exploitation": "active"
                      },
                      {
                        "Automatable": "yes"
                      },
                      {
                        "Technical Impact": "total"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-08-18T17:44:09.652188Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              },
              {
                "other": {
                  "content": {
                    "dateAdded": "2026-08-18",
                    "reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-59310"
                  },
                  "type": "kev"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-07-30T15:03:32.431Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "references": [
              {
                "tags": [
                  "third-party-advisory"
                ],
                "url": "https://medium.com/@quirso_de/global-exploitation-of-cve-2026-59310-by-suspected-chinese-nexus-apt-related-cve-2026-59309-443a79e1466d"
              },
              {
                "tags": [
                  "third-party-advisory"
                ],
                "url": "https://medium.com/@quirso_de/active-exploitation-of-cve-2026-59310-361-victim-ips-across-47-countries-9783187cc6ff"
              },
              {
                "tags": [
                  "government-resource"
                ],
                "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-59310"
              }
            ],
            "timeline": [
              {
                "lang": "en",
                "time": "2026-08-18T00:00:00.000Z",
                "value": "CVE-2026-59310 added to CISA KEV"
              }
            ],
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "defaultStatus": "unaffected",
              "product": "Cloud Foundation",
              "vendor": "VMware",
              "versions": [
                {
                  "status": "affected",
                  "version": "9.1.x.x"
                },
                {
                  "status": "affected",
                  "version": "9.0.x.x"
                },
                {
                  "status": "affected",
                  "version": "5.x"
                }
              ]
            },
            {
              "defaultStatus": "unaffected",
              "product": "vSphere Foundation",
              "vendor": "VMware",
              "versions": [
                {
                  "status": "affected",
                  "version": "9.1.x.x"
                },
                {
                  "status": "affected",
                  "version": "9.0.x.x"
                }
              ]
            },
            {
              "defaultStatus": "unaffected",
              "product": "vCenter",
              "vendor": "VMware",
              "versions": [
                {
                  "lessThan": "9.1.0.0300",
                  "status": "affected",
                  "version": "9.1.x.x",
                  "versionType": "custom"
                },
                {
                  "lessThan": "9.0.2.0100",
                  "status": "affected",
                  "version": "9.0.x.x",
                  "versionType": "custom"
                },
                {
                  "lessThan": "8.0 U3k",
                  "status": "affected",
                  "version": "8.0",
                  "versionType": "custom"
                }
              ]
            },
            {
              "defaultStatus": "unaffected",
              "product": "Telco Cloud Infrastructure",
              "vendor": "VMware",
              "versions": [
                {
                  "status": "affected",
                  "version": "3.0"
                }
              ]
            },
            {
              "defaultStatus": "unaffected",
              "product": "Telco Cloud Platform",
              "vendor": "VMware",
              "versions": [
                {
                  "status": "affected",
                  "version": "5.1.x"
                },
                {
                  "status": "affected",
                  "version": "5.0.x"
                },
                {
                  "status": "affected",
                  "version": "4.x"
                },
                {
                  "status": "affected",
                  "version": "3.0"
                }
              ]
            }
          ],
          "datePublic": "2026-07-29T04:30:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "supportingMedia": [
                {
                  "base64": false,
                  "type": "text/html",
                  "value": "VMware vCenter contains a directory traversal vulnerability in the Syslog server.\u0026nbsp;\u003cspan\u003eA malicious actor with network access to vCenter\u0026nbsp;may exploit this issue to execute arbitrary code.\u003c/span\u003e\u003cbr\u003e\u003cbr\u003e"
                }
              ],
              "value": "VMware vCenter contains a directory traversal vulnerability in the Syslog server.\u00a0A malicious actor with network access to vCenter\u00a0may exploit this issue to execute arbitrary code."
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "HIGH",
                "baseScore": 9.8,
                "baseSeverity": "CRITICAL",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "NONE",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
                "version": "3.1"
              },
              "format": "CVSS",
              "scenarios": [
                {
                  "lang": "en",
                  "value": "GENERAL"
                }
              ]
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-22",
                  "description": "CWE-22 Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-07-30T12:28:20.696Z",
            "orgId": "dcf2e128-44bd-42ed-91e8-88f912c1401d",
            "shortName": "vmware"
          },
          "references": [
            {
              "url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/38017"
            }
          ],
          "source": {
            "discovery": "UNKNOWN"
          },
          "title": "vCenter directory-traversal vulnerability",
          "x_generator": {
            "engine": "Vulnogram 1.0.4"
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "dcf2e128-44bd-42ed-91e8-88f912c1401d",
        "assignerShortName": "vmware",
        "cveId": "CVE-2026-59310",
        "datePublished": "2026-07-30T12:19:25.296Z",
        "dateReserved": "2026-07-04T18:13:57.026Z",
        "dateUpdated": "2026-09-12T03:55:18.047Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}

BDU:2026-11333 (CVE-2026-59310)

Vulnerability from fstec – Published: 2026-08-10 – Updated: 2026-08-21 – View on bdu.fstec.ru Exploit publicly available Yes Fixed

CISA ENISA Previdian

Title

Уязвимость сервера Syslog Server средства управления виртуальной инфраструктурой VMware vCenter Server, позволяющая нарушителю выполнить произвольный код

Summary

Уязвимость сервера Syslog Server средства управления виртуальной инфраструктурой VMware vCenter Server связана с неверным ограничением имени пути к каталогу. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, выполнить произвольный код

Severity

10.0 (High) CVSS 2.0


                      
                        AV:N/AC:L/Au:N/C:C/I:C/A:C

9.8 (Critical) CVSS 3.1


                      
                        CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Class

Code vulnerability

Status

Confirmed by the vendor

Exploitation

Resource manipulation

Incidents

Yes

Remediation

Software update

CWE

CWE-22 - Неверное ограничение имени пути к каталогу с ограниченным доступом («Обход пути»)

Aliases

CVE-2026-59310, VMSA-2026-0006

References

5 references

URL
https://support.broadcom.com/web/ecx/support-content-notification/-/external/co…
https://thehackernews.com/2026/07/three-critical-vmware-flaws-allow-auth.html
https://github.com/vmware/vcf-security-and-compliance-guidelines/tree/main/secu…
https://github.com/HORKimhab/CVE-2026-59310
https://www.cisa.gov/sites/default/files/csv/known_exploited_vulnerabilities.csv

Impacted products

5 products from 1 vendor

Vendors

Broadcom Inc.

Products

VMware Telco Cloud Platform, VMware Cloud Foundation, VMware vSphere Foundation, VMware vCenter Server, VMware Telco Cloud Infrastructure

Versions

до KB449886 (VMware Telco Cloud Platform), до 9.1.0.0200 (VMware Cloud Foundation), до 9.0.2.0100 (VMware Cloud Foundation), до 8.0 U3k (VMware Cloud Foundation), до 9.1.0.0200 (VMware vSphere Foundation), до 9.0.2.0100 (VMware vSphere Foundation), до 8.0 U3k (VMware vCenter Server), до KB449886 (VMware Telco Cloud Infrastructure)

Product types

Application software, Network software, Virtualization software

Mitigations

Использование рекомендаций производителя: https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/38017 https://github.com/vmware/vcf-security-and-compliance-guidelines/tree/main/security-advisories/vmsa-2026-0006

JSON

To clipboard

{
  "CVSS 2.0": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
  "CVSS 3.0": "AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "Broadcom Inc.",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e KB449886 (VMware Telco Cloud Platform), \u0434\u043e 9.1.0.0200 (VMware Cloud Foundation), \u0434\u043e 9.0.2.0100 (VMware Cloud Foundation), \u0434\u043e 8.0 U3k (VMware Cloud Foundation), \u0434\u043e 9.1.0.0200 (VMware vSphere Foundation), \u0434\u043e 9.0.2.0100 (VMware vSphere Foundation), \u0434\u043e 8.0 U3k (VMware vCenter Server), \u0434\u043e KB449886 (VMware Telco Cloud Infrastructure)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f:\nhttps://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/38017\nhttps://github.com/vmware/vcf-security-and-compliance-guidelines/tree/main/security-advisories/vmsa-2026-0006",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": "29.07.2026",
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "21.08.2026",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "10.08.2026",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2026-11333",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2026-59310, VMSA-2026-0006",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u0434\u0430",
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "VMware Telco Cloud Platform, VMware Cloud Foundation, VMware vSphere Foundation, VMware vCenter Server, VMware Telco Cloud Infrastructure",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441\u0435\u0440\u0432\u0435\u0440\u0430 Syslog Server \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u043e\u0439 VMware vCenter Server, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0421\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442 \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0435",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041d\u0435\u0432\u0435\u0440\u043d\u043e\u0435 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u0435 \u0438\u043c\u0435\u043d\u0438 \u043f\u0443\u0442\u0438 \u043a \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0443 \u0441 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u044b\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c (\u00ab\u041e\u0431\u0445\u043e\u0434 \u043f\u0443\u0442\u0438\u00bb) (CWE-22)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441\u0435\u0440\u0432\u0435\u0440\u0430 Syslog Server \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u043e\u0439 VMware vCenter Server \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0432\u0435\u0440\u043d\u044b\u043c \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u0435\u043c \u0438\u043c\u0435\u043d\u0438 \u043f\u0443\u0442\u0438 \u043a \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0443. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c\u0438",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/38017\nhttps://thehackernews.com/2026/07/three-critical-vmware-flaws-allow-auth.html\nhttps://github.com/vmware/vcf-security-and-compliance-guidelines/tree/main/security-advisories/vmsa-2026-0006\nhttps://github.com/HORKimhab/CVE-2026-59310\nhttps://www.cisa.gov/sites/default/files/csv/known_exploited_vulnerabilities.csv",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041f\u0440\u0438\u043a\u043b\u0430\u0434\u043d\u043e\u0435 \u041f\u041e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c, \u0421\u0435\u0442\u0435\u0432\u043e\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0435 \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u043e, \u041f\u041e \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438/\u041f\u041e \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e-\u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0433\u043e \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-22",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 10)\n\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 3.1 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 9,8)"
}

CERTFR-2026-AVI-0949

Vulnerability from certfr_avis - Published: 2026-07-30 - Updated: 2026-07-30

De multiples vulnérabilités ont été découvertes dans les produits VMware. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, un déni de service à distance et une atteinte à la confidentialité des données.

Solutions

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

Impacted products

Vendor	Product	Description
VMware	vSphere ESXi	ESX version 8.0 antérieures à ESXi80U3i-25205845
VMware	vSphere Foundation	vSphere Foundation versions 9.0.x antérieures à 9.0.2.0100-25595025
VMware	Telco Cloud Infrastructure	Telco Cloud Infrastructure versions 3.0 sans le correctif de sécurité KB449886
VMware	vCenter Server	vCenter versions 8.0 antérieures à 8.0 U3k
VMware	Cloud Foundation	Cloud Foundation versions 9.0.x antérieures à 9.0.2.0100-25595025
VMware	Workstation	Workstation versions antérieures à 26H1
VMware	Cloud Foundation	Cloud Foundation versions 9.1.x antérieures à 9.1.0.0300
VMware	Cloud Foundation	Cloud Foundation versions 5.x sans le correctif de sécurité KB88287
VMware	Telco Cloud Platform	Telco Cloud Platform versions 3.0, 4.x, 5.0.x et 5.1.x sans le correctif de sécurité KB449886
VMware	vSphere Foundation	vSphere Foundation versions 9.1.x antérieures à 9.1.0.0300
VMware	Fusion	Fusion versions antérieures à 26H1

References

Title

Publication Time

FKIE_CVE-2026-59310

Vulnerability from fkie_nvd - Published: 2026-07-30 13:16 - Updated: 2026-08-19 04:17

CISA ENISA Previdian

Severity

9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Summary

VMware vCenter contains a directory traversal vulnerability in the Syslog server. A malicious actor with network access to vCenter may exploit this issue to execute arbitrary code.

References

URL	Tags
security@vmware.com	https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/38017	Vendor Advisory
134c704f-9b21-4f2e-91b3-4a467353bcc0	https://medium.com/@quirso_de/active-exploitation-of-cve-2026-59310-361-victim-ips-across-47-countries-9783187cc6ff	Third Party Advisory
134c704f-9b21-4f2e-91b3-4a467353bcc0	https://medium.com/@quirso_de/global-exploitation-of-cve-2026-59310-by-suspected-chinese-nexus-apt-related-cve-2026-59309-443a79e1466d	Third Party Advisory
134c704f-9b21-4f2e-91b3-4a467353bcc0	https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-59310	US Government Resource

Impacted products

Vendor	Product	Version
vmware	vcenter_server	*
vmware	vcenter_server	8.0
vmware	vcenter_server	8.0
vmware	vcenter_server	8.0
vmware	vcenter_server	8.0
vmware	vcenter_server	8.0
vmware	vcenter_server	8.0
vmware	vcenter_server	8.0
vmware	vcenter_server	8.0
vmware	vcenter_server	8.0
vmware	vcenter_server	8.0
vmware	vcenter_server	8.0
vmware	vcenter_server	8.0
vmware	vcenter_server	8.0
vmware	vcenter_server	8.0
vmware	vcenter_server	8.0
vmware	vcenter_server	8.0
vmware	vcenter_server	8.0
vmware	vcenter_server	8.0
vmware	vcenter_server	8.0
vmware	vcenter_server	8.0
vmware	vcenter_server	8.0
vmware	vcenter_server	8.0
vmware	vcenter_server	8.0
vmware	vcenter_server	8.0
vmware	vcenter_server	8.0
vmware	vcenter_server	8.0
vmware	telco_cloud_infrastructure	3.0
vmware	telco_cloud_platform	*
vmware	vcenter_server	*
vmware	vcenter_server	*
vmware	cloud_foundation	-
vmware	vsphere_foundation	-

JSON

To clipboard

{
  "affected": [
    {
      "affectedData": [
        {
          "defaultStatus": "unaffected",
          "product": "Cloud Foundation",
          "vendor": "VMware",
          "versions": [
            {
              "status": "affected",
              "version": "9.1.x.x"
            },
            {
              "status": "affected",
              "version": "9.0.x.x"
            },
            {
              "status": "affected",
              "version": "5.x"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "vSphere Foundation",
          "vendor": "VMware",
          "versions": [
            {
              "status": "affected",
              "version": "9.1.x.x"
            },
            {
              "status": "affected",
              "version": "9.0.x.x"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "vCenter",
          "vendor": "VMware",
          "versions": [
            {
              "lessThan": "9.1.0.0300",
              "status": "affected",
              "version": "9.1.x.x",
              "versionType": "custom"
            },
            {
              "lessThan": "9.0.2.0100",
              "status": "affected",
              "version": "9.0.x.x",
              "versionType": "custom"
            },
            {
              "lessThan": "8.0 U3k",
              "status": "affected",
              "version": "8.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Telco Cloud Infrastructure",
          "vendor": "VMware",
          "versions": [
            {
              "status": "affected",
              "version": "3.0"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Telco Cloud Platform",
          "vendor": "VMware",
          "versions": [
            {
              "status": "affected",
              "version": "5.1.x"
            },
            {
              "status": "affected",
              "version": "5.0.x"
            },
            {
              "status": "affected",
              "version": "4.x"
            },
            {
              "status": "affected",
              "version": "3.0"
            }
          ]
        }
      ],
      "source": "security@vmware.com"
    }
  ],
  "cisaActionDue": "2026-08-21",
  "cisaExploitAdd": "2026-08-18",
  "cisaRequiredAction": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA\u2019s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA\u2019s \u201cForensics Triage Requirements\u201d (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset\u0027s internet exposure and ensuring adherence to BOD 26-04 patching guidelines.",
  "cisaVulnerabilityName": "Broadcom VMware vCenter Path Traversal Vulnerability",
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:vmware:vcenter_server:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "6B17478A-E6D9-4C6B-8810-7E1BC9E7392F",
              "versionEndExcluding": "8.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:vmware:vcenter_server:8.0:-:*:*:*:*:*:*",
              "matchCriteriaId": "CC974CA1-88D3-42E4-BF1F-28870F8171B5",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:vmware:vcenter_server:8.0:a:*:*:*:*:*:*",
              "matchCriteriaId": "EFE63984-F69B-4593-9AEC-D179D6D98B08",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:vmware:vcenter_server:8.0:b:*:*:*:*:*:*",
              "matchCriteriaId": "34D1F3B3-8E3F-4E4D-8EE6-2F593663B5CC",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:vmware:vcenter_server:8.0:c:*:*:*:*:*:*",
              "matchCriteriaId": "16F3D992-9F48-4604-9AAF-DC2D1CE98BE2",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:vmware:vcenter_server:8.0:update1:*:*:*:*:*:*",
              "matchCriteriaId": "C745A7E6-4760-48CD-B7C4-1C2C20217F21",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:vmware:vcenter_server:8.0:update1a:*:*:*:*:*:*",
              "matchCriteriaId": "A5522514-8ED9-45DB-9036-33FE40D77E7D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:vmware:vcenter_server:8.0:update1b:*:*:*:*:*:*",
              "matchCriteriaId": "8C27C660-E917-4944-8B4C-41D9622B76D7",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:vmware:vcenter_server:8.0:update1c:*:*:*:*:*:*",
              "matchCriteriaId": "56CFB469-B3E6-4503-A47C-D18206D4D19A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:vmware:vcenter_server:8.0:update1d:*:*:*:*:*:*",
              "matchCriteriaId": "67024A43-9E13-4F4E-B711-731792DA3840",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:vmware:vcenter_server:8.0:update1e:*:*:*:*:*:*",
              "matchCriteriaId": "1188E9D6-53AD-40D0-8146-3728D071008D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:vmware:vcenter_server:8.0:update2:*:*:*:*:*:*",
              "matchCriteriaId": "604F559F-1775-4F29-996E-9079B99345B6",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:vmware:vcenter_server:8.0:update2a:*:*:*:*:*:*",
              "matchCriteriaId": "61DC9400-5AEE-49AC-9925-0A96E32BD8C0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:vmware:vcenter_server:8.0:update2b:*:*:*:*:*:*",
              "matchCriteriaId": "98C1B77E-AB0E-4E8A-8294-2D3D230CDF9B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:vmware:vcenter_server:8.0:update2c:*:*:*:*:*:*",
              "matchCriteriaId": "8EC8BEF1-7908-46C0-841A-834778D1A863",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:vmware:vcenter_server:8.0:update2d:*:*:*:*:*:*",
              "matchCriteriaId": "89D5A7F9-3183-4EE7-828C-13BB9169E199",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:vmware:vcenter_server:8.0:update2e:*:*:*:*:*:*",
              "matchCriteriaId": "9EB94E5F-9AFB-471C-887C-4C53B5169347",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:vmware:vcenter_server:8.0:update3:*:*:*:*:*:*",
              "matchCriteriaId": "D8C5E404-9A83-472C-AE97-25DAE332C327",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:vmware:vcenter_server:8.0:update3a:*:*:*:*:*:*",
              "matchCriteriaId": "78312C9E-4653-4C79-9886-A7A63DB98262",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:vmware:vcenter_server:8.0:update3b:*:*:*:*:*:*",
              "matchCriteriaId": "722B1899-0229-4BEA-94C4-1E475406E7AF",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:vmware:vcenter_server:8.0:update3c:*:*:*:*:*:*",
              "matchCriteriaId": "E1EA338E-4263-42A9-8E91-C3D91A7F8AD1",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:vmware:vcenter_server:8.0:update3d:*:*:*:*:*:*",
              "matchCriteriaId": "3EFDF451-E83B-4340-BF06-AA017B042841",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:vmware:vcenter_server:8.0:update3e:*:*:*:*:*:*",
              "matchCriteriaId": "20D28DF8-BAD2-4613-9325-A55B06FB1F21",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:vmware:vcenter_server:8.0:update3g:*:*:*:*:*:*",
              "matchCriteriaId": "FF925343-3889-46EC-87C5-82B8C3DC33ED",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:vmware:vcenter_server:8.0:update3h:*:*:*:*:*:*",
              "matchCriteriaId": "D9BD9CEF-D37E-45AF-883F-120C32849E14",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:vmware:vcenter_server:8.0:update3i:*:*:*:*:*:*",
              "matchCriteriaId": "1D402845-1C50-40CE-BAA2-CDD5615B660D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:vmware:vcenter_server:8.0:update3j:*:*:*:*:*:*",
              "matchCriteriaId": "9552133F-9C74-4368-857A-BAFA182BE8EA",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:vmware:telco_cloud_infrastructure:3.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "D11103A7-6AB5-4E78-BE11-BC2A04A09F19",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:a:vmware:telco_cloud_platform:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "320FDFEE-22D1-4650-B177-BF7B1E750D45",
              "versionEndIncluding": "5.2",
              "versionStartIncluding": "3.0",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:vmware:vcenter_server:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "45C693CF-0995-4332-9B1E-018EBCDAF83A",
              "versionEndExcluding": "9.0.2.0100",
              "versionStartIncluding": "9.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:vmware:vcenter_server:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "C014E906-B622-424E-BFF9-660187C73C54",
              "versionEndExcluding": "9.1.0.0300",
              "versionStartIncluding": "9.1",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:vmware:cloud_foundation:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "31A7BB38-3238-413E-9736-F1A165D40867",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:a:vmware:vsphere_foundation:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "03AD0AB7-45A3-4DC7-923D-1166346EEA12",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "VMware vCenter contains a directory traversal vulnerability in the Syslog server.\u00a0A malicious actor with network access to vCenter\u00a0may exploit this issue to execute arbitrary code."
    }
  ],
  "id": "CVE-2026-59310",
  "lastModified": "2026-08-19T04:17:24.940",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "HIGH",
          "baseScore": 9.8,
          "baseSeverity": "CRITICAL",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 5.9,
        "source": "security@vmware.com",
        "type": "Secondary"
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2026-59310",
          "options": [
            {
              "exploitation": "active"
            },
            {
              "automatable": "yes"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "role": "CISA Coordinator",
          "timestamp": "2026-07-29T00:00:00+00:00",
          "version": "2.0.3"
        }
      }
    ]
  },
  "published": "2026-07-30T13:16:53.993",
  "references": [
    {
      "source": "security@vmware.com",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/38017"
    },
    {
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://medium.com/@quirso_de/active-exploitation-of-cve-2026-59310-361-victim-ips-across-47-countries-9783187cc6ff"
    },
    {
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://medium.com/@quirso_de/global-exploitation-of-cve-2026-59310-by-suspected-chinese-nexus-apt-related-cve-2026-59309-443a79e1466d"
    },
    {
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "tags": [
        "US Government Resource"
      ],
      "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-59310"
    }
  ],
  "sourceIdentifier": "security@vmware.com",
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-22"
        }
      ],
      "source": "security@vmware.com",
      "type": "Secondary"
    }
  ]
}

GHSA-V2GP-49GJ-2C9F

Vulnerability from github – Published: 2026-07-30 15:31 – Updated: 2026-08-18 18:31

Details

VMware vCenter contains a directory traversal vulnerability in the Syslog server. A malicious actor with network access to vCenter may exploit this issue to execute arbitrary code.

Severity

9.8 (Critical)


                  
                    CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2026-59310"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-22"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2026-07-30T13:16:53Z",
    "severity": "CRITICAL"
  },
  "details": "VMware vCenter contains a directory traversal vulnerability in the Syslog server.\u00a0A malicious actor with network access to vCenter\u00a0may exploit this issue to execute arbitrary code.",
  "id": "GHSA-v2gp-49gj-2c9f",
  "modified": "2026-08-18T18:31:47Z",
  "published": "2026-07-30T15:31:50Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-59310"
    },
    {
      "type": "WEB",
      "url": "https://medium.com/@quirso_de/active-exploitation-of-cve-2026-59310-361-victim-ips-across-47-countries-9783187cc6ff"
    },
    {
      "type": "WEB",
      "url": "https://medium.com/@quirso_de/global-exploitation-of-cve-2026-59310-by-suspected-chinese-nexus-apt-related-cve-2026-59309-443a79e1466d"
    },
    {
      "type": "WEB",
      "url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/38017"
    },
    {
      "type": "WEB",
      "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-59310"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
      "type": "CVSS_V3"
    }
  ]
}

NCSC-2026-0269

Vulnerability from csaf_ncscnl - Published: 2026-07-29 12:46 - Updated: 2026-07-29 13:29

Summary

Kwetsbaarheden verholpen in VMware producten

Scope

5 vulnerabilities in this advisory, including CVE-2026-59310.

CVE-2026-59310

VMware vCenter's Syslog server contains a directory traversal vulnerability that could be exploited to access unauthorized files.

9.8 (Critical)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Known affected: 4 products

Open the full advisory

WID-SEC-W-2026-2569

Vulnerability from csaf_certbund - Published: 2026-07-28 22:00 - Updated: 2026-08-10 22:00

Summary

VMware Produkte: Mehrere Schwachstellen

Severity

Hoch

Scope

5 vulnerabilities in this advisory, including CVE-2026-59310.

CVE-2026-59310

Known affected: 5 products

Open the full advisory

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

CVE-2026-59310 (GCVE-0-2026-59310)

CISA

Known Exploited Vulnerability - GCVE BCP-07 Compliant

Timestamps

Scope

Evidence

Vendor Report Successful Exploitation Confidence: 80% Source: cisa-kev

Details

References

ENISA

Known Exploited Vulnerability - GCVE BCP-07 Compliant

Timestamps

Scope

Evidence

Csirt Report Successful Exploitation Confidence: 75% Source: enisa-cnw-kev

Details

References

Previdian

Known Exploited Vulnerability - GCVE BCP-07 Compliant

Timestamps

Scope

Evidence

Public Report Successful Exploitation Confidence: 70% Source: kevintel

Details

References

BDU:2026-11333 (CVE-2026-59310)

CERTFR-2026-AVI-0949

Solutions

FKIE_CVE-2026-59310

GHSA-V2GP-49GJ-2C9F

NCSC-2026-0269

WID-SEC-W-2026-2569

Tags

Sightings

Nomenclature

Related by attack behaviour