Broadcom VMware vCenter Path Traversal Vulnerability

概要

参考情報

• support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/38017 · Vendor Advisory
• medium.com/@quirso_de/active-exploitation-of-cve-2026-59310-361-victim-ips-across-47-countries-9783187cc6ff · Third Party Advisory
• medium.com/@quirso_de/global-exploitation-of-cve-2026-59310-by-suspected-chinese-nexus-apt-related-cve-2026-59309-443a79e1466d · Third Party Advisory
• cisa.gov/known-exploited-vulnerabilities-catalog · US Government Resource
• CISA KEV · CVE-2026-59310

vcenter server のその他の脆弱性

• CVE-2026-59309緊急 9.8VMware vCenter contains an authentication bypass vulnerability in the VMware Directory Service. A malicious actor with network access to vCe…
• CVE-2024-38813緊急 9.8悪用確認済み（CISA KEV）The vCenter Server contains a privilege escalation vulnerability. A malicious actor with network access to vCenter Server may trigger this v…
• CVE-2024-38812緊急 9.8悪用確認済み（CISA KEV）The vCenter Server contains a heap-overflow vulnerability in the implementation of the DCERPC protocol. A malicious actor with network acces…
• CVE-2024-37087中 5.3The vCenter Server contains a denial-of-service vulnerability. A malicious actor with network access to vCenter Server may create a denial-o…
• CVE-2024-37081高 7.8The vCenter Server contains multiple local privilege escalation vulnerabilities due to misconfiguration of sudo. An authenticated local user…