CVE-2026-59310
vCenter directory-traversal vulnerability
KEV RANSOMWARECRITICAL 9.8EPSS 2.6%
VMware vCenter contains a directory traversal vulnerability in the Syslog server. A malicious actor with network access to vCenter may exploit this issue to execute arbitrary code.
- Affected
- VMware · Cloud Foundation · vSphere Foundation · vCenter · Telco Cloud Infrastructure · Telco Cloud Platform
- CVSS v3.1 VMWARE
- 9.8 CRITICAL
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - EPSS
- 2.56% chance of exploitation in the next 30 days, 85th percentile
- CISA KEV
- added 2026-08-18, used in ransomware campaigns
- Published
- 2026-07-30
- Updated
- 2026-09-12
Proof-of-concept exploits (8)
- https://medium.com/@quirso_de/global-exploitation-of-cve-2026-59310-by-suspected-chinese-…
- https://medium.com/@quirso_de/active-exploitation-of-cve-2026-59310-361-victim-ips-across…
- HORKimhab/CVE-2026-593100★ · 2026-08-17
- BiuTrap/CVE-2026-593102★ · 2026-08-19
- ChinaRan0/CVE-2026-59310-POC7★ · 2026-09-25
- tijldeneut/Security157★ · 2026-09-28
- vpxuser/CVE-2026-593100★ · 2026-10-09
- zgsfsec/CVE-2026-59310-POC7★ · 2026-09-25