Search/CVE-2026-59310
● CVE — Critical

CVE-2026-59310

VendorvmwareProductvcenter serverDiscoveredJul 30, 2026UpdatedAug 19, 2026

VMware vCenter contains a directory traversal vulnerability in the Syslog server. A malicious actor with network access to vCenter may exploit this issue to execute arbitrary code.

View graph Watch Export
CVSS v3.1
9.8 CRITICAL
EPSS
2.56%
probability of exploitation in 30 days
CISA KEV
Listed
confirmed active exploitation
News coverage
7
sources referencing this CVE
Related IOCs
6
seen in the same coverage
EPSS Trend
Aug 14, 2026 → Sep 25, 2026
▲ 1.42pp
1.14% → 2.56% over 6 tracked changes
CVSS v3.1 Detail
Attack VectorNETWORK
Attack ComplexityLOW
Privileges RequiredNONE
User InteractionNONE
ScopeUNCHANGED
ConfidentialityHIGH
IntegrityHIGH
AvailabilityHIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Connections
16 relationships
Timeline
disclosure → media coverage
Jul 29, 2026
advisories.ncsc.nl reports: NCSC-2026-0269 [1.01] [M/H] Kwetsbaarheden verholpen in VMware producten
Jul 30, 2026
Disclosure — published as a CVE record. · last revised by NVD Aug 19, 2026
Aug 12, 2026
thehackernews.com reports: Attackers Exploit VMware vCenter Vulnerability to Gain Persistent Remote Access
Aug 13, 2026
bleepingcomputer.com reports: Critical VMware vCenter RCE flaw exploited for reverse SSH access
Aug 17, 2026
thehackernews.com reports: Suspected China-Nexus Actor Exploits VMware vCenter Flaw, Deploys Babuk-Derived Ransomware
Sep 15, 2026
bleepingcomputer.com reports: CISA: Critical VMware RCE flaw now exploited by ransomware gangs
Sep 17, 2026
thehackernews.com reports: ThreatsDay: Self-Rewriting Agents, 800+ Flaws Patched, Insider SIM Swaps and 22 More New Stories
Oct 29, 2026
securityweek.com reports: Chinese Hackers Quietly Used Low-Severity ESXi Logging Flaw as Zero-Day
Public PoC (5)
github.com/HORKimhab/CVE-2026-59310github.com/BiuTrap/CVE-2026-59310github.com/zgsfsec/CVE-2026-59310-POCgithub.com/vpxuser/CVE-2026-59310github.com/chu0119/vc-strike
Unverified third-party code — review before executing.