CVE-2026-59310CISA KEV
Broadcom VMware vCenter Path Traversal Vulnerability
CISA lists this Broadcom VMware vCenter vulnerability as known exploited. The vendor's advisory has the fixed versions.
CISA catalog record
Broadcom VMware vCenter contains a path traversal vulnerability which could allow a threat actor with network access to vCenter to execute arbitrary code.
- Product
- VMware vCenter
- Added to KEV
- 18 Aug 2026
- Federal remediation due
- 21 Aug 2026
- Known ransomware use
- Yes