CVE-2026-59310: VMware vCenter contains a directory traversal vulnerability
VMware vCenter contains a directory traversal vulnerability in the Syslog server. A malicious actor with network access to vCenter may exploit this issue to execute arbitrary code.
- CISA KEV-listed (remediation due 2026-08-21)
- used in ransomware campaigns
- EPSS 2.6% (84.7% percentile)
- CVSS 9.8 critical