Directory Traversal Vulnerability in VMware vCenter by VMware
CVE-2026-59310

9.8CRITICAL

Key Information:

Vendor

Vmware
Status
Cloud Foundation
Vsphere Foundation
Vcenter
Telco Cloud Infrastructure
Vendor
CVE Published:
30 July 2026

What is CVE-2026-59310?

VMware vCenter features a directory traversal vulnerability in its Syslog server component. This flaw allows attackers with network access to exploit the vulnerability, potentially leading to unauthorized execution of arbitrary code. Proper safeguards and patching are essential to mitigate the risks associated with this vulnerability.

Affected Version(s)

Cloud Foundation 9.1.x.x

Cloud Foundation 9.0.x.x

Cloud Foundation 5.x

References

https://support.broadcom.com/web/ecx/support-content-noti...

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.