{"uuid": "1c0affb0-521a-4f8d-a97e-c8c597d5b21f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-59310", "type": "seen", "source": "https://gist.github.com/cyberupdates365/e074f54d6cb285825fd5b26bbd1b8766", "content": "# Critical VMware vCenter Flaw Exploited by China APT: Patch Now!\n\nHackers are actively exploiting the VMware vCenter flaw CVE-2026-59310 to deploy Babuk ransomware on ESXi hosts. Read our technical breakdown.\n\nEnterprise virtualization infrastructure remains the primary target for advanced persistent threats seeking total network dominance. A devastating new attack campaign has proven that patching delays of even a few days can lead to catastrophic data center compromise.\n\nThe VMware vCenter flaw CVE-2026-59310 is currently being actively exploited by a highly sophisticated, suspected China-nexus threat actor. This critical directory traversal vulnerability allows attackers to execute arbitrary code with root privileges, deploy persistent webshells, and ultimately encrypt ESXi environments with Babuk-derived ransomware.\n\n\ud83d\udd17 **[Read the Full Technical Breakdown, Explore the C2 WebSockets, and View Mitigation Steps on CyberUpdates365](https://cyberupdates365.com/vmware-vcenter-flaw-cve-2026-59310-exploited/)**", "creation_timestamp": "2026-08-17T10:28:34.006781Z"}