Description (CNA)
VMware vCenter contains a directory traversal vulnerability in the Syslog server. A malicious actor with network access to vCenter may exploit this issue to execute arbitrary code.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| VMware / Cloud Foundation | affected 9.1.x.x; affected 9.0.x.x; affected 5.x |
| VMware / vSphere Foundation | affected 9.1.x.x; affected 9.0.x.x |
| VMware / vCenter | affected 9.1.x.x before 9.1.0.0300; affected 9.0.x.x before 9.0.2.0100; affected 8.0 before 8.0 U3k |
| VMware / Telco Cloud Infrastructure | affected 3.0 |
| VMware / Telco Cloud Platform | affected 5.1.x; affected 5.0.x; affected 4.x; affected 3.0 |
CWE
CWE-22
References
ADP enrichment
No English description supplied.
- https://medium.com/@quirso_de/global-exploitation-of-cve-2026-59310-by-suspected-chinese-nexus-apt-related-cve-2026-59309-443a79e1466d
- https://medium.com/@quirso_de/active-exploitation-of-cve-2026-59310-361-victim-ips-across-47-countries-9783187cc6ff
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-59310