Description
VMware vCenter contains a directory traversal vulnerability in the Syslog server. A malicious actor with network access to vCenter may exploit this issue to execute arbitrary code.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
VMware Cloud Foundation
Default version status: unaffected
9.1.x.xaffected9.0.x.xaffected5.xaffected
VMware vSphere Foundation
Default version status: unaffected
9.1.x.xaffected9.0.x.xaffected
VMware vCenter
Default version status: unaffected
9.1.x.x to < 9.1.0.0300affected9.0.x.x to < 9.0.2.0100affected8.0 to < 8.0 U3kaffected
VMware Telco Cloud Infrastructure
Default version status: unaffected
3.0affected
VMware Telco Cloud Platform
Default version status: unaffected
5.1.xaffected5.0.xaffected4.xaffected3.0affected
References
- https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/38017 ↗
- https://medium.com/@quirso_de/global-exploitation-of-cve-2026-59310-by-suspected-chinese-nexus-apt-related-cve-2026-59309-443a79e1466d ↗
- https://medium.com/@quirso_de/active-exploitation-of-cve-2026-59310-361-victim-ips-across-47-countries-9783187cc6ff ↗
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-59310 ↗