Broadcom VMware vCenter Path Traversal Vulnerability (CVE-2026-59310)

7 karet z 7 položek · v celém archivu · celý přehled CZ · EN/orig

CVE-2026-59310

KEV ✓ · ransomware EPSS 0.03 EPSS k 18. 10. 2026 náprava do 21. 8. 2026

Hodnocení závažnosti

9.8 CVSS 3.1 vmware

útok odkudkoli z internetu bez přípravy bez přihlášení bez zásahu uživatele

dopad plný únik dat úplná změna dat úplný výpadek

přesah dopad jen na zranitelnou součást

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

zvyšuje závažnost mírně zvyšuje závažnost snižuje závažnost

cve.org · NVD

Hvězdička u CVE znamená, že jsem to číslo vytáhl z širšího textu článku. Neukazuju u něj proto KEV, EPSS ani CVSS, a to preventivně, protože článek se na něj mohl jen odkazovat, třeba jako na starší kauzu. Fakta o samotném CVE jsou nahoře.

15. 9. 2026 14:16

CISA: Critical VMware RCE flaw now exploited by ransomware gangs

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warned security teams that ransomware gangs have now joined ongoing attacks exploiting a critical VMware vCenter vulnerability patched in July. [...]

CVE-2024-37079 * CVE-2025-22225 * CVE-2025-60710 * CVE-2026-22719 * CVE-2026-59310 * VMware US

tg: zneužíváno tg: zranitelnost tp: ransomware

15. 9. 2026 14:16 · BleepingComputer · CISA: Critical VMware RCE flaw now exploited by ransomware gangs

18. 8. 2026 20:01

VMware security advisory (AV26-763) – Update 1

Serial number: AV26-763Date: July 30, 2026Updated: August 18, 2026 As of July 30, 2026, VMware is affected by vulnerabilities in the following products: Cloud Foundation 5.x 9.0.x.x 9.1.x.x Prior to 5.2.3 ESX Prior to ESXi-9.0.2.0100-25595025 Prior to ESXi-9.1.0.0-25370933 Prior to ESXi-9.1.0.0200-25557999 Prior to ESXi80U3i-25205845 Prior to ESXi80U3k-25595708 Fusion Prior to 26H1 Telco Cloud Infrastructure 3.0 Telco Cloud Platform 4.x 5.0.x 5.1.x Workstation Prior to 26H1 vCenter Prior to 8.0…

KEV ✓ · ransomware EPSS 0.03 CVE-2026-41703 CVE-2026-41709 CVE-2026-47876 CVE-2026-59309 CVE-2026-59310 VMware CA

18. 8. 2026 20:01 · Cyber Centre Kanada · VMware security advisory (AV26-763) – Update 1

18. 8. 2026 · zachyceno 20:30

CISA Adds Four Known Exploited Vulnerabilities to Catalog

CISA has added four new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2026-33824 Microsoft Internet Key Exchange (IKE) Service Extensions Double Free Vulnerability CVE-2026-55040 Microsoft SharePoint Weak Authentication Vulnerability CVE-2026-59310 Broadcom VMware vCenter Path Traversal Vulnerability CVE-2026-65400 Apple macOS Improper Authentication Vulnerability These types of vulnerabilities are a frequent attack vector…

KEV ✓ · ransomware EPSS 0.70 CVE-2026-33824 CVE-2026-55040 CVE-2026-59310 CVE-2026-65400 Microsoft Broadcom Apple veřejná správa US

18. 8. 2026 · zachyceno 20:30 · CISA Advisories · CISA Adds Four Known Exploited Vulnerabilities to Catalog

18. 8. 2026 · zachyceno 19:00

Broadcom VMware vCenter Path Traversal Vulnerability (CVE-2026-59310)

CISA added CVE-2026-59310 to the Known Exploited Vulnerabilities catalog. Affected product: Broadcom VMware vCenter. Remediation due date: 2026-08-21.

KEV ✓ · ransomware EPSS 0.03 CVE-2026-59310 Broadcom US

18. 8. 2026 · zachyceno 19:00 · CISA KEV · Broadcom VMware vCenter Path Traversal Vulnerability (CVE-2026-59310)

3. 8. 2026 15:15

3rd August – Threat Intelligence Report

For the latest discoveries in cyber research for the week of 27th July, please download our Threat Intelligence Bulletin. TOP ATTACKS AND BREACHES Minnesota IT Services has confirmed coordinated cyberattacks affecting more than 30 community water utilities across the state. The incidents briefly disrupted a treatment plant in Braham and affected industrial control systems. Officials reported that drinking water safety was not affected. While the attack was not officially attributed, federal…

KEV ✓ · ransomware EPSS 0.90 CVSS 9.8 CVE-2026-20316 CVE-2026-42897 CVE-2026-59309 CVE-2026-59310 CVE-2026-59726 CVE-2026-63077 CVE-2026-66066 Cisco Broadcom JetBrains Microsoft vodárenství finance zdravotnictví telekomunikace IL

tg: incident tg: zranitelnost tg: přehled tp: phishing tp: únik dat tp: AI tp: průmyslové systémy

3. 8. 2026 15:15 · Check Point Research · 3rd August – Threat Intelligence Report

30. 7. 2026 15:23

Vulnerabilità in prodotti VMware

Broadcom ha rilasciato aggiornamenti di sicurezza per risolvere alcune nuove vulnerabilità, di cui 3 con gravità “critica” e una con gravità “alta”, in vari prodotti della suite VMware. Tali vulnerabilità, qualora sfruttate, potrebbero consenti ad un utente malintenzionato remoto di eludere i meccanismi di autenticazione, elevare i propri privilegi ed eseguire codice arbitrario sui sistemi interessati.

KEV ✓ · ransomware EPSS 0.03 CVE-2026-41703 CVE-2026-47876 CVE-2026-59309 CVE-2026-59310 Broadcom VMware IT

30. 7. 2026 15:23 · CSIRT Itálie (ACN) · Vulnerabilità in prodotti VMware

30. 7. 2026 12:35

Critical VMware vCenter Vulnerabilities Allow Authentication Bypass and Remote Code Execution (CVE-2026-59309, CVE-2026-59310)

OverviewOn July 29, 2026, Broadcom published security advisory VMSA-2026-0006 addressing multiple vulnerabilities in several VMWare products. Included in the advisory are two critical remotely exploitable vulnerabilities affecting VMware vCenter Server: CVE-2026-59309 and CVE-2026-59310. Both vulnerabilities carry CVSSv3.1 base scores of 9.8 and can be exploited by unauthenticated attackers with network access to a vulnerable vCenter Server.CVECVSSv3.1Description SummaryCVE-2026-593099.8 …

KEV ✓ · ransomware EPSS 0.03 CVSS 9.8 CVE-2026-59309 CVE-2026-59310 CVE-2026-593109 VMware Broadcom US

30. 7. 2026 12:35 · Rapid7 · Critical VMware vCenter Vulnerabilities Allow Authentication Bypass and Remote Code Execution (CVE-2026-59309, CVE-2026-59310)