Broadcom VMware vCenter Path Traversal Vulnerability

CRITICAL 9.8EXPLOITED (CISA KEV)CVE-2026-59310 · Published 30/07/2026 · updated 19/08/2026

Broadcom VMware vCenter Path Traversal Vulnerability. Actively exploited: CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 18/08/2026. Patch affected systems as an emergency. It is known to be used in ransomware campaigns.

Package	Affected versions	Patched versions
vcenter server vmware	`= 8.0≥ 9.0, < 9.0.2.0100≥ 9.1, < 9.1.0.0300< 8.0`	`9.0.2.01009.1.0.03008.0`

Description

VMware vCenter contains a directory traversal vulnerability in the Syslog server. A malicious actor with network access to vCenter may exploit this issue to execute arbitrary code.

References

support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/38017 · Vendor Advisory
medium.com/@quirso_de/active-exploitation-of-cve-2026-59310-361-victim-ips-across-47-countries-9783187cc6ff · Third Party Advisory
medium.com/@quirso_de/global-exploitation-of-cve-2026-59310-by-suspected-chinese-nexus-apt-related-cve-2026-59309-443a79e1466d · Third Party Advisory
cisa.gov/known-exploited-vulnerabilities-catalog · US Government Resource
CISA KEV · CVE-2026-59310

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free