AI synthesis Threat actors are actively exploiting CVE-2026-59310, a critical directory traversal flaw in VMware vCenter (CVSS 9.8), for persistent remote access. Broadcom has patched it, but exploitation is underway, per QUIRSO and multiple security reports.
What changed
Every report remains linked to its original publisher.
Threat actors have begun to actively exploit a recently patched critical security flaw in Broadcom VMware vCenter, according to new findings from QUIRSO. The vulnerability in question is CVE-2026-59310 (CVSS score: 9.8), a directory-traversal vulnerability in the VMware vCente...
Tracked as CVE-2026–59310, the directory traversal bug allows remote attackers to execute arbitrary code. The post Critical VMware vCenter Vulnerability in Attackers’ Crosshairs appeared first on SecurityWeek.
A recently patched critical vulnerability (CVE-2026-59310) in VMware vCenter Syslog Server is being exploited in an active campaign to deploy a reverse SSH tool for persistence and remote access. [...]