Vulnerability (CVE)
Broadcom released updates for VMware ESX, vCenter, Workstation, and Fusion covering multiple flaws, three rated critical, including an authentication bypass in vCenter (CVE-2026-59309, CVSS 9.8) and a directory-traversal flaw in vCenter (CVE-2026-59310,...
QUIRSO reported active exploitation of CVE-2026-59310, a directory-traversal flaw in Broadcom VMware vCenter with a CVSS score of 9.8 that allows an actor with network access to execute arbitrary code, following patches released late last month....
QUIRSO attributed exploitation of CVE-2026-59310, a directory-traversal flaw in Broadcom VMware vCenter with a CVSS score of 9.8 patched on July 29, 2026, to a suspected China-nexus actor, with activity beginning five days after public disclosure and an...
Broadcom patched two VMware Workstation and Fusion flaws, including CVE-2026-59346 (CVSS 9.3), an integer-overflow bug that lets a local attacker with administrative privileges on a VM using a VMXNET3 virtual network adapter execute code on the host. The...