Firetruck

CVE-2026-59310

KEV · Ransomware
Updated Sep 12, 2026 · PUBLISHED
View KEV entry →

Description

Broadcom VMware vCenter contains a path traversal vulnerability which could allow a threat actor with network access to vCenter to execute arbitrary code.

Full record on cve.org →

Affected packages

PackageVendor / ProductVersion rangeStatus
Cloud FoundationVMware / Cloud Foundation5.xaffected
Cloud FoundationVMware / Cloud Foundation9.0.x.xaffected
Cloud FoundationVMware / Cloud Foundation9.1.x.xaffected
Telco Cloud InfrastructureVMware / Telco Cloud Infrastructure3.0affected
Telco Cloud PlatformVMware / Telco Cloud Platform3.0affected
Telco Cloud PlatformVMware / Telco Cloud Platform4.xaffected
Telco Cloud PlatformVMware / Telco Cloud Platform5.0.xaffected
Telco Cloud PlatformVMware / Telco Cloud Platform5.1.xaffected
vCenterVMware / vCenter>= 8.0, < 8.0 U3kaffected
vCenterVMware / vCenter>= 9.0.x.x, < 9.0.2.0100affected
vCenterVMware / vCenter>= 9.1.x.x, < 9.1.0.0300affected
vSphere FoundationVMware / vSphere Foundation9.0.x.xaffected
vSphere FoundationVMware / vSphere Foundation9.1.x.xaffected