Critical VMware vCenter Security Vulnerability Exploited

Threat actors have begun actively exploiting a recently patched critical security vulnerability in Broadcom VMware vCenter. According to new findings from QUIRSO, this is the vulnerability CVE-2026-59310, which has a CVSS score of 9.8. This directory traversal vulnerability in the VMware vCenter Server allows a malicious actor with network access to execute arbitrary code.

The vulnerability was addressed by VMware in a security patch, which may not have been implemented in a timely manner by all affected users. The attackers are taking advantage of this delay to gain unauthorized access to systems. The ability to execute arbitrary code poses a significant risk to businesses that rely on VMware vCenter.

Details on the CVE-2026-59310 Vulnerability

CVE-2026-59310 is a directory traversal vulnerability that allows attackers to access files outside the intended directory. This can lead to the disclosure of sensitive information or allow attackers to install malware on the affected system. The vulnerability particularly affects versions of VMware vCenter released before the patch.

Researchers at QUIRSO have noted that attacks on this vulnerability have increased in recent weeks. The attackers are using various techniques to exploit the vulnerability, including automated scripts and targeted phishing attacks to gain access to corporate networks. A swift response to this threat is crucial to minimize potential damage.

Recommended Actions for Businesses

Businesses using VMware vCenter should urgently ensure that they have installed the latest security patches. Implementing security updates is one of the most effective ways to protect against known vulnerabilities. Additionally, organizations should review their network security and ensure that only authorized users have access to critical systems.

The security situation is exacerbated by the fact that many businesses may not have the necessary resources to continuously monitor and protect their systems. The combination of inadequate security measures and the exploitation of vulnerabilities by attackers can lead to significant financial and reputational damage. The threat of cyberattacks remains a central concern for businesses worldwide.

The VMware vCenter security vulnerability CVE-2026-59310 is an example of the ongoing challenges that businesses face regarding cybersecurity. The threat from attackers exploiting vulnerabilities to gain access to sensitive data remains high. Companies are called upon to take proactive measures to protect their systems and ensure the integrity of their data.