CVE-2026-59310

VMware vCenter contains a directory traversal vulnerability in the Syslog server. A malicious actor with network access to vCenter may exploit this issue to execute arbitrary code.

CVSS v3.1

9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

45.88% chance of exploitation in the next 30 days, 99th percentile

CISA KEV

added 2026-08-18

Published

2026-07-30

Updated

2026-08-19

Proof-of-concept exploits (4)

• https://medium.com/@quirso_de/global-exploitation-of-cve-2026-59310-by-suspected-chinese-…
• https://medium.com/@quirso_de/active-exploitation-of-cve-2026-59310-361-victim-ips-across…
• HORKimhab/CVE-2026-593100★ · 2026-08-17
• BiuTrap/CVE-2026-593100★ · 2026-08-19

References

• CVE Record
• NVD entry

Related

• CVE-2026-64849
• CVE-2026-73570
• CVE-2026-59258
• CVE-2026-5952
• CVE-2026-59255
• CVE-2026-5960