{"vulnerability": "CVE-2026-59310", "sightings": [{"uuid": "92706cc6-4488-4989-92de-ddd2395d278b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59310", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mrumtlur6z2b", "content": "\ud83d\udd17 CVE : CVE-2026-41703, CVE-2026-41709, CVE-2026-47876, CVE-2026-59309, CVE-2026-59310", "creation_timestamp": "2026-07-30T14:15:10.756184Z"}, {"uuid": "b1d4eadf-afdc-493d-9a37-b438cf5faa4d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2026-59310", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/425eef6e-5590-4b78-be9c-a1f4a30adda1", "content": "", "creation_timestamp": "2026-07-30T06:11:30.515985Z"}, {"uuid": "f98c9f2f-a84b-426c-945b-be9a20cce1f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59310", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3mrucln5bqd27", "content": "Broadcom's security advisory VMSA-2026-0006 addresses critical vulnerabilities in VMware products, including vCenter and ESX. Key issues include CVE-2026-59309 (authentication bypass, CVSS 9.8) allowing unauthorized access to vCenter, and CVE-2026-59310 (directory traversal, CVSS 9.", "creation_timestamp": "2026-07-30T11:11:48.056624Z"}, {"uuid": "9bc76c97-7567-4e08-99d3-4b82b2b8b7d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59310", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0269", "content": "VMware heeft kwetsbaarheden verholpen in VMware vCenter en VMware ESX producten. VMware vCenter bevat een kritieke authentication-bypass kwetsbaarheid in de Directory Service met kenmerk CVE-2026-59309. Deze kwetsbaarheid stelt een kwaadwillende met netwerktoegang tot VMware vCenter in staat deze kwetsbaarheid te misbruiken om de authenticatie te omzeilen en ongeautoriseerde toegang tot het systeem te verkrijgen. \n\nDaarnaast bevat VMware vCenter ook een kritieke directory-traversal kwetsbaarheid in de Syslog server met kenmerk CVE-2026-59310. Deze kwetsbaarheid kan een kwaadwillende in staat stellen willekeurige code uit te voeren, waardoor mogelijk bestands- en directorypaden kunnen worden gemanipuleerd en toegang kan worden verkregen tot bestanden buiten de bedoelde Syslog-directory.\n\nVMware ESXi bevat een kritieke out-of-bounds write\u00a0kwetsbaarheid in de VMXNET3 virtuele netwerkadapter met kenmerk CVE-2026-47876. Deze kwetsbaarheid stelt een kwaadwillende met lokale beheerdersrechten op een virtuele machine met een VMXNET3 virtuele netwerkadapter in staat, code uit te voeren op de onderliggende host. Dit maakt het voor een kwaadwillende mogelijk, data buiten de bedoelde geheugenlimieten kan schrijven, wat kan leiden tot geheugenbeschadiging en onvoorspelbaar gedrag of compromittering van het virtuele systeem. Virtuele netwerkadapters die geen gebruikmaken van VMXNET3 zijn niet kwetsbaar. \n\nIn VMware ESX, Workstation en Fusion bevatten ook een out-of-bounds read kwetsbaarheid met kenmerk CVE-2026-41703. Misbruik van deze  kwetsbaarheid die kan resulteren in onbedoelde toegang tot geheugen buiten de toegewezen buffer, wat kan leiden tot informatielekken of systeeminstabiliteit binnen virtuele omgevingen. Daarnaast bevat VMware ESX een kwetsbaarheid met kenmerk CVE-2026-41709 door onvoldoende logging. Een kwaadwillende beheerder kan deze kwetsbaarheid misbruiken om bepaalde acties uit te voeren die niet in de logbestanden worden geregistreerd.\n\nHet is goed gebruik om toegang tot ESXi en vCenter uitsluitend beschikbaar te stellen vanuit een gescheiden beheeromgeving waarin alleen geautoriseerde beheerders toegang hebben. Deze beheerinterfaces dienen niet rechtstreeks vanaf internet of externe netwerken toegankelijk te zijn.", "creation_timestamp": "2026-07-30T01:00:45.194379Z"}, {"uuid": "68b62361-a060-4edf-8e85-e3ef565b82f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59310", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrukcxiapg2s", "content": "CVE-2026-59310 - vcenter\nVMware vCenter's Syslog server has a security weakness that could allow an attacker with network access to run unauthorized code. This could lead to a complete takeover of the system.\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#vcenter #vmware #CVE #infosec", "creation_timestamp": "2026-07-30T13:30:04.953636Z"}, {"uuid": "50e5eb11-3efc-46a1-8a64-a3879c80a9e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59310", "type": "seen", "source": "https://bsky.app/profile/neroqc.bsky.social/post/3mruluva2mc27", "content": "Critical VMware vCenter Vulnerabilities Allow Authentication Bypass and Remote Code Execution (CVE-2026-59309, CVE-2026-59310)\nwww.rapid7.com/blog/post/et...", "creation_timestamp": "2026-07-30T13:58:04.221808Z"}, {"uuid": "2cd97621-9f11-4606-a4fe-db1dca87254e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59310", "type": "published-proof-of-concept", "source": "https://github.com/google/tsunami-security-scanner-plugins/blob/master/templated/templateddetector/plugins/cve/2026/VMWareVCenter_CVE_2026_59310.textproto", "content": "", "creation_timestamp": "2026-08-01T10:15:02.353879Z"}, {"uuid": "1f95ff16-ec08-4575-8d59-fd0b2e82ed0b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-59310", "type": "seen", "source": "https://www.acn.gov.it/portale/w/vulnerabilita-in-prodotti-vmware-7", "content": "", "creation_timestamp": "2026-07-30T16:45:02.402028Z"}, {"uuid": "36d1a16f-b28a-4283-8fa5-529938c07710", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59310", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/117037808517517411", "content": "New;\nBroadcom has released advisories relating to several high and medium-severity vulnerabilities https://support.broadcom.com/web/ecx/security-advisory #Broadcom \nNvidia:\nCRITICAL: NVIDIA Dynamo - July 2026 https://nvidia.custhelp.com/app/answers/detail/a_id/5842\nNVIDIA Triton Inference Server - June 2026 https://nvidia.custhelp.com/app/answers/detail/a_id/5860 #Nvidia \nDell:\nSecurity Update for Dell PowerProtect Data Domain Multiple Vulnerabilities https://www.dell.com/support/kbdoc/en-us/000450699/dsa-2026-060-security-update-for-dell-powerprotect-data-domain-multiple-vulnerabilities #Dell #Apache \nGoogle:\nThis CRITICAL vulnerability was updated yesterday: VMSA-2026-0006.1: VMware ESX, vCenter, Workstation, and Fusion updates address multiple vulnerabilities (CVE-2026-59309, CVE-2026-59310, CVE-2026-47876, CVE-2026-41703, CVE-2026-41709) https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/38017 #google #infosec #vulnerability", "creation_timestamp": "2026-08-04T14:53:54.596890Z"}, {"uuid": "93a8288f-0032-47d7-b286-62d390544136", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-59310", "type": "seen", "source": "https://bsky.app/profile/vritrasecnews.bsky.social/post/3mruwplknoc2u", "content": "Overview On July 29, 2026, Broadcom published security advisory VMSA-2026-0006 addressing multiple vulnerabilities in several V...\n\n\ud83d\udd17 https://www.rapid7.com/blog/post/etr-critical-vmware-vcenter-vulnerabilities-allow-authentication-bypass-and-remote-code-execution-cve-2026-59309-cve-2026-59310", "creation_timestamp": "2026-07-30T17:11:53.744953Z"}, {"uuid": "48c5caa6-416a-4106-bae6-66df03aa4d6e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59310", "type": "published-proof-of-concept", "source": "https://github.com/google/tsunami-security-scanner-plugins/blob/master/templated/templateddetector/plugins/cve/2026/VMWareVCenter_CVE_2026_59310.textproto", "content": "", "creation_timestamp": "2026-08-03T10:15:02.235912Z"}, {"uuid": "78908bcf-4f3e-4f2b-9b47-7e6c4cc09ae1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-59310", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/vmware-security-advisory-av26-763", "content": "", "creation_timestamp": "2026-07-30T20:15:05.707866Z"}, {"uuid": "a4391b64-86ef-4fa7-856a-ea347faa696f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59310", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mrw5tgnutq2m", "content": "\ud83e\udd16 VMware patches 3 critical vulns: vCenter auth bypass (CVE-2026-59309, 9.8), syslog dir traversal (CVE-2026-59310, 9.8), VMXNET3 OOB write (CVE-2026-47876, 9.3). Patch now.\nhttps://www.bleepingcomputer.com/news/security/vmware-fixes-three-critical-flaws-allowing-auth-bypass-vm-escapes/", "creation_timestamp": "2026-07-31T04:51:58.769049Z"}, {"uuid": "d107521a-d7e3-4973-94d3-12d992f64ced", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59310", "type": "published-proof-of-concept", "source": "https://github.com/google/tsunami-security-scanner-plugins/blob/master/templated/templateddetector/plugins/cve/2026/VMWareVCenter_CVE_2026_59310.textproto", "content": "", "creation_timestamp": "2026-08-04T10:15:03.256108Z"}, {"uuid": "b03be95b-fa0f-4145-87f2-a40e6a33bd25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59310", "type": "seen", "source": "https://bsky.app/profile/etguenni.bsky.social/post/3mrwmokz3qs2j", "content": "Teils kritische Schwachstellen (CVE-2026-59309, CVE-2026-59310, CVE-2026-47876, CVE-2026-41703, CVE-2026-41709) in VMware by Broadcom-Produkten (VMware ESX, vCenter, Workstation, Fusion). Updates sind laut Adversory vorhanden. \nborncity.com/blog/2026/07...", "creation_timestamp": "2026-07-31T09:17:42.164534Z"}, {"uuid": "b0a967f7-6673-4161-8901-6d879fa5c87a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59310", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mrx5ziadda2y", "content": "CVE-2026-59310: Is Broadcom's VMware Patch Response Adequate? #CyberSecurity #VMware #Broadcom", "creation_timestamp": "2026-07-31T14:28:01.665933Z"}, {"uuid": "2de0ee07-d1d6-4511-91ba-43681be9f251", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59310", "type": "published-proof-of-concept", "source": "https://github.com/google/tsunami-security-scanner-plugins/blob/master/templated/templateddetector/plugins/cve/2026/VMWareVCenter_CVE_2026_59310.textproto", "content": "", "creation_timestamp": "2026-08-02T10:15:01.884329Z"}, {"uuid": "9c9ee259-891c-47ee-9c9b-f714c4d69261", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59310", "type": "seen", "source": "https://bsky.app/profile/cerberusit.bsky.social/post/3mszjy524a52j", "content": "Here we go again with VMware vCenter, giving anyone who asks remote arbitrary code execution via CVE-2026-59310 directory traversal. Organizations running this virtualisation staple are the lucky targets once more, wondering why we even bother trying to keep servers isolated. Def...\n\nRead full story", "creation_timestamp": "2026-08-14T06:32:32.497242Z"}, {"uuid": "61be69a1-5da5-4262-ab11-a5dd2a553594", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59310", "type": "seen", "source": "https://bsky.app/profile/pixelsandpulse.bsky.social/post/3mszmjdvgb32j", "content": "A critical VMware vCenter RCE (CVE-2026-59310) was weaponized globally in just five days, enabling attackers to gain persistent reverse SSH access. This isn't just a patch job; you need to actively hunt for established\u2026\n\nhttps://www.tpp.blog/1kh3dpq\n\n#cybersecurity #broadcom #cve202659310", "creation_timestamp": "2026-08-14T07:17:57.591202Z"}, {"uuid": "b0b4fbc3-0633-407d-ba10-b2e3d59cf4e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-59310", "type": "seen", "source": "https://infosec.exchange/users/patrickcmiller/statuses/117105119802895450", "content": "vCenter Flaw Exploited Just Five Days After Disclosure https://www.infosecurity-magazine.com/news/vcenter-cve-2026-59310-exploited/", "creation_timestamp": "2026-08-16T12:12:01.877955Z"}, {"uuid": "a08dfd05-9f53-4483-9a58-a8a21de214b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-59310", "type": "seen", "source": "https://bsky.app/profile/ahmandonk.bsky.social/post/3mszr7kfscp2g", "content": "\ud83d\udcf0 Critical VMware vCenter RCE Dieksploitasi untuk Membuka Akses Reverse SSH\n\n\ud83d\udc49 Baca artikel lengkap di sini: https://ahmandonk.com/2026/08/14/kerentanan-vmware-vcenter-cve-2026-59310/\n\n#advancedPersistentThreat #apt #broadcom #c2 #commandAndControl #cyberAttack #cyberSecurity #cybersecurity #e", "creation_timestamp": "2026-08-14T08:41:57.227743Z"}, {"uuid": "fcabf8f1-542e-4b4c-a2c0-43f7e2d755d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59310", "type": "seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3mszufpk5r22g", "content": "Thanks to collaboration with QUIRSO GmbH we are sharing the VMware vCenter CVE-2026-59310 Exploitation Victim Special Report shadowserver.org/what-we-do/n...\n\nCheck compromised IPs for your network/constituency & remediate! File prefix: 2026-08-13-special\n\nSee: medium.com/@quirso_de/a...", "creation_timestamp": "2026-08-14T09:39:07.474074Z"}, {"uuid": "653f306d-44bc-4374-8e09-4424d5c2971f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59310", "type": "seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3mszufr4pwc2g", "content": "Thanks to collaboration with QUIRSO GmbH we are sharing the VMware vCenter CVE-2026-59310 Exploitation Victim Special Report shadowserver.org/what-we-do/n...\n\nCheck compromised IPs for your network/constituency & remediate! File prefix: 2026-08-13-special\n\nSee: medium.com/@quirso_de/a...", "creation_timestamp": "2026-08-14T09:39:07.953068Z"}, {"uuid": "67c8a43f-df6f-4a97-924b-4fb007f97fa5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-59310", "type": "seen", "source": "https://infosec.exchange/users/shadowserver/statuses/117093200653782382", "content": "Thanks to collaboration with QUIRSO GmbH we are sharing the VMware vCenter CVE-2026-59310 Exploitation Victim Special Report https://shadowserver.org/what-we-do/network-reporting/vmware-vcenter-cve-2026-59310-exploitation-victim-special-report/\nCheck compromised IPs for your network/constituency & remediate! File prefix: 2026-08-13-special\nSee: https://medium.com/@quirso_de/active-exploitation-of-cve-2026-59310-361-victim-ips-across-47-countries-9783187cc6ff", "creation_timestamp": "2026-08-14T09:40:50.794719Z"}, {"uuid": "7203ac88-93d4-49e4-b05d-09f513aff27d", "vulnerability_lookup_origin": "cce329bf-df49-4c6e-a027-80be2e6483bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2026-59310", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/703e3f13-3a5a-48e3-b8cb-eb602bbbe0c2", "content": "", "creation_timestamp": "2026-08-20T08:12:45.729049Z"}, {"uuid": "7e4bc5f7-943d-4f39-b46f-030a4651bb5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59310", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mszwcmupcz2w", "content": "\ud83e\udd16 CVE-2026-59310 (CVSS 9.8): directory traversal in the VMware vCenter Syslog server allows unauthenticated RCE. Under active exploitation in a global campaign.\nhttps://www.darkreading.com/vulnerabilities-threats/global-threat-campaign-critical-vmware-vcenter-flaw", "creation_timestamp": "2026-08-14T10:13:09.227112Z"}, {"uuid": "f1cd88b2-a5a3-4e22-90ad-45b5aa45bbab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59310", "type": "seen", "source": "https://bsky.app/profile/insomnisec.bsky.social/post/3mtmom6xxjs2d", "content": "\ud83d\udce1 CVE-2026-59310: Critical VMware vCenter RCE Under Active Exploitation by Suspected China-Nexus Actor", "creation_timestamp": "2026-08-21T21:15:55.438798Z"}, {"uuid": "ec57222b-2d59-473a-b7d0-caafef9f90a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-59310", "type": "seen", "source": "https://infosec.exchange/users/shadowserver/statuses/117093425467716788", "content": "You can also track CVE-2026-59310 & CVE-2026-59309 vulnerable VMware vCenter instances in our daily Vulnerable HTTP reporting since July 30th: https://shadowserver.org/what-we-do/network-reporting/vulnerable-http-report/\nTracker: https://dashboard.shadowserver.org/statistics/combined/time-series/?date_range=30&source=http_vulnerable&source=http_vulnerable6&tag=cve-2026-59310%2B&dataset=unique_ips&limit=100&group_by=geo&stacking=stacked&auto_update=on\nWorld Map: https://dashboard.shadowserver.org/statistics/combined/tree/?date_range=1&source=http_vulnerable&source=http_vulnerable6&tag=cve-2026-59310%2B&data_set=count&scale=log&auto_update=on", "creation_timestamp": "2026-08-14T10:38:01.473847Z"}, {"uuid": "26aad766-099e-4658-816c-ba0108006df1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59310", "type": "seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3mszxpopqb22g", "content": "You can also track CVE-2026-59310 & CVE-2026-59309 vulnerable VMware vCenter instances in our daily Vulnerable HTTP reporting since July 30th: shadowserver.org/what-we-do/n...\n\nTracker: dashboard.shadowserver.org/statistics/c...\n\nWorld Map: dashboard.shadowserver.org/statistics/c...", "creation_timestamp": "2026-08-14T10:38:24.117581Z"}, {"uuid": "d4dd2cb4-d8bb-41c0-a612-20f0c092b198", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59310", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3msjzdmn4b62k", "content": "CVE-2026-59310 is trending. Hype score 6, currently #5 on cvemon.\n\nVMware vCenter contains a directory traversal vulnerability in the Syslog server. A malicious actor with network access to vCenter may exploit this issue to execute arbitrary code.\n\nhttps://cvemon.intruder.io/cves/CVE-2026-59310", "creation_timestamp": "2026-08-08T02:26:33.097902Z"}, {"uuid": "b2ba337f-49ee-4238-9eff-908f633bfd1d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59310", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mtkqogn7uj2v", "content": "Top 3 CVE for last 7 days:\nCVE-2026-65400: 28 interactions\nCVE-2026-59310: 25 interactions\nCVE-2026-43499: 14 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-19490: 8 interactions\nCVE-2026-76404: 8 interactions\nCVE-2026-63030: 7 interactions\n", "creation_timestamp": "2026-08-21T02:47:38.358517Z"}, {"uuid": "1f0ae188-6558-49e5-b832-8e02986db448", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59310", "type": "seen", "source": "https://bsky.app/profile/royans.bsky.social/post/3mt24mk767i2m", "content": "Critical RCE via Directory Traversal in Broadcom VMware vCenter CVE-2026-59310\n\nhttps://gbhackers.com/hackers-exploit-critical-vmware-vcenter-flaw\nhttps://flagthis.com/tldr/6107\n\n##Broadcom ##VMware ##RCE ##APT ##CloudSecurity", "creation_timestamp": "2026-08-14T12:06:04.328519Z"}, {"uuid": "323d065e-2c15-488e-8a84-bd7cb54f83c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-59310", "type": "seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3mtafjqqnuw2y", "content": "VMware vCenter\u306eCVE-2026-59310\u304c\u5b9f\u969b\u306e\u30b5\u30a4\u30d0\u30fc\u653b\u6483\u306b\u60aa\u7528\u300047\u30ab\u56fd361 IP\u3067\u4fb5\u5bb3\u78ba\u8a8d\u3001reverse_ssh\u3067\u6c38\u7d9a\u5316 \nhttps://rocket-boys.co.jp/security-measures-lab/vmware-vcenter-cve-2026-59310-cyberattack/\n\n#\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5bfe\u7b56Lab #security #securitynews #cyberattack #\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3", "creation_timestamp": "2026-08-17T00:01:32.536100Z"}, {"uuid": "cfa0248b-c836-40d4-8043-5d1a7065778e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59310", "type": "published-proof-of-concept", "source": "https://github.com/google/tsunami-security-scanner-plugins/blob/master/templated/templateddetector/plugins/cve/2026/VMWareVCenter_CVE_2026_59310.textproto", "content": "", "creation_timestamp": "2026-08-05T10:15:02.533730Z"}, {"uuid": "eccc0493-8dfe-475c-8378-7258742df285", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59310", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mtaoo6jumm2z", "content": "Top 3 CVE for last 7 days:\nCVE-2026-68820: 40 interactions\nCVE-2026-59310: 37 interactions\nCVE-2026-20349: 14 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-33696: 5 interactions\nCVE-2026-17581: 3 interactions\nCVE-2026-14498: 2 interactions\n", "creation_timestamp": "2026-08-17T02:45:05.886054Z"}, {"uuid": "72bae85a-f9a8-448f-8c67-eae691c3addd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59310", "type": "seen", "source": "https://t.me/thehackernews/9787", "content": "\ud83d\udea8 Watch out: Attackers are exploiting VMware vCenter for persistence.\n\nAfter exploiting CVE-2026-59310, they planted a malicious cron job running reverse_ssh to maintain access. Researchers identified up to 361 victim IPs across 47 countries.\n\nRead more: https://thehackernews.com/2026/08/attackers-exploit-vmware-vcenter.html", "creation_timestamp": "2026-08-12T10:00:04.171718Z"}, {"uuid": "bf6a9acf-76e0-4c93-87d0-a501b0cd9178", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59310", "type": "seen", "source": "https://bsky.app/profile/cvesentinel.bsky.social/post/3mtersplgxm2t", "content": "\ud83d\uded1 CVE-2026-59310\nBroadcom VMware vCenter\nCVSS 9.8 / EPSS 1% / KEV: No\nTL;DR: VMware vCenter contains a directory traversal vulnerability in the Syslog server. A\u2026\nhttps://cvesentinel.com/report/CVE-2026-59310?utm_source=bluesky&utm_medium=social&utm_campaign=cvesentinel\n#infosec #CVE #vulnerability", "creation_timestamp": "2026-08-18T17:51:57.294977Z"}, {"uuid": "dab27af1-7a99-4eed-a6ee-300936386984", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59310", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3msuvhy5pt32c", "content": "VMware vCenter \u306e CVE-2026-59310 (CVSS 9.8) \u306e\u8106\u5f31\u6027\u304c\u653b\u6483\u8005\u306b\u60aa\u7528\u3055\u308c\u3001\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u7d4c\u7531\u3067\u4efb\u610f\u306e\u30b3\u30fc\u30c9\u5b9f\u884c\u304c\u53ef\u80fd\u306b\u306a\u3063\u3066\u3044\u307e\u3059\u3002", "creation_timestamp": "2026-08-12T10:14:57.088941Z"}, {"uuid": "908a1260-8fde-4984-9c17-5017968e7079", "vulnerability_lookup_origin": "405284c2-e461-4670-8979-7fd2c9755a60", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59310", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/c6db8abc-33b9-4517-be02-9d0af4a43768", "content": "", "creation_timestamp": "2026-08-18T18:00:02.547261Z"}, {"uuid": "e82cce0c-6515-4b4e-b821-d7bc2e7575ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59310", "type": "seen", "source": "https://t.me/pphm_HackerNews/2675", "content": "\ud83d\udd34 Suspected China-Nexus Actor Exploits VMware vCenter Flaw, Deploys Babuk-Derived Ransomware\n\nCybersecurity researchers have attributed the exploitation of a newly patched security flaw in Broadcom VMware vCenter to a suspected China-nexus advanced persistent threat (APT).\n\nThe attacks involve the exploitation of CVE-2026-59310 (CVSS score: 9.8), a severe directory-traversal vulnerability in the VMware vCenter server that could be weaponized by a malicious actor to execute arbitrary code. A fix for the flaw was released by Broadcom on July 29, 2026.\n\nGerman incident response company QUIRSO assessed with moderate confidence that the exploitation campaign aimed at CVE-2026-59310 is operated by a Chinese-speaking threat actor, likely working in the UTC+08:00 time zone, which is predominantly used in Chinese-speaking regions.", "creation_timestamp": "2026-08-21T23:00:05.641861Z"}, {"uuid": "c86bca8b-6334-40ed-af01-5a26c6f34adf", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59310", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/f4c4aa19-689d-4dec-8fbe-d26799000406", "content": "", "creation_timestamp": "2026-08-12T11:00:23.892495Z"}, {"uuid": "ce83ef3a-dd83-48a5-ac53-dabb94beb2ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59310", "type": "seen", "source": "https://bsky.app/profile/trinity.sh/post/3mtl7ai7lbp27", "content": "CVE-2026-59310: VMware vCenter path traversal \u2192 RCE. CVSS 9.8. Unauthenticated. CISA KEV due date is TODAY (Aug 21). If you run vCenter with the Syslog service exposed, patch now.\n\n", "creation_timestamp": "2026-08-21T07:08:16.527900Z"}, {"uuid": "e3123cf6-62f6-4d59-99fc-f4b1bffa4e1d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59310", "type": "seen", "source": "https://t.me/pphm_HackerNews/2598", "content": "\ud83d\udd34 Attackers Exploit VMware vCenter Vulnerability to Gain Persistent Remote Access\n\nThreat actors have begun to actively exploit a recently patched critical security flaw in Broadcom VMware vCenter, according to new findings from QUIRSO.\n\nThe vulnerability in question is CVE-2026-59310 (CVSS score: 9.8), a directory-traversal vulnerability in the VMware vCenter server that a malicious actor with network access can exploit to execute arbitrary code. Patches for the flaw were released by Broadcom late last month.\n\nThe German cybersecurity company said it discovered the activity following an incident response engagement. The attack chain is said to have exhibited path traversal activity consistent with the flaw, followed by the deployment of a malicious cron job to establish persistence on the host using reverse_ssh, an open-source tool used for setting up SSH connections to threat actor-controlled infrastructure.", "creation_timestamp": "2026-08-21T23:00:05.995875Z"}, {"uuid": "25f795b9-1ee7-4a1d-9b97-672fc8b3d7c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59310", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3msv2qehovg2u", "content": "\ud83e\udd16 CVE-2026-59310 (CVSS 9.8): directory traversal in VMware vCenter actively exploited in the wild. Unauthenticated attacker can execute arbitrary code and gain persistent remote access. Patches available.\nhttps://thehackernews.com/2026/08/attackers-exploit-vmware-vcenter.html", "creation_timestamp": "2026-08-12T11:49:06.416808Z"}, {"uuid": "17cf6072-f105-4a5e-8a50-ae8a0f13e3ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59310", "type": "seen", "source": "https://infosec.exchange/users/jbhall56/statuses/117082438593592650", "content": "The vulnerability in question is CVE-2026-59310 (CVSS score: 9.8), a directory-traversal vulnerability in the VMware vCenter server that a malicious actor with network access can exploit to execute arbitrary code. https://thehackernews.com/2026/08/attackers-exploit-vmware-vcenter.html", "creation_timestamp": "2026-08-12T12:03:54.042669Z"}, {"uuid": "f1d7c558-94f1-42f5-9824-92af1f72aeff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59310", "type": "seen", "source": "https://bsky.app/profile/jbhall56.bsky.social/post/3msv3lfe6lk2x", "content": "The vulnerability in question is CVE-2026-59310 (CVSS score: 9.8), a directory-traversal vulnerability in the VMware vCenter server that a malicious actor with network access can exploit to execute arbitrary code. thehackernews.com/2026/08/atta...", "creation_timestamp": "2026-08-12T12:04:14.961184Z"}, {"uuid": "9185aef6-8d67-48e3-bd24-a811d4879c4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59310", "type": "seen", "source": "https://bsky.app/profile/undercodenews.bsky.social/post/3msv5bzkyx22z", "content": "VMware vCenter Under Attack: Critical CVE-2026-59310 Exploited in a Rapid Global Intrusion Campaign +\u00a0Video\n\nA New Warning for Virtualization Administrators Virtualization infrastructure has quietly become one of the most valuable targets in modern cyberattacks. A compromised workstation can expose\u2026", "creation_timestamp": "2026-08-12T12:34:47.240505Z"}, {"uuid": "142faaef-670a-418d-bbcf-314092cb54a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59310", "type": "seen", "source": "https://bsky.app/profile/strondex.bsky.social/post/3msv5hnt6h52m", "content": "Breach breakdown: Attackers Are Scanning for CVE-2026-59310: What VMware vCenter Admins Need\u2026  https://strondex.com/blog/attackers-exploit-vmware-vcenter-vulnerability-to-gain-persistent?utm_source=twitter&utm_medium=social&utm_campaign=syndication  #CyberInsurance #SMB", "creation_timestamp": "2026-08-12T12:37:56.528136Z"}, {"uuid": "b0bb3220-783e-4592-831e-a9d5398e4098", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-59310", "type": "seen", "source": "https://bsky.app/profile/thecybersecguru.com/post/3mtbc2mh4o42l", "content": "The Anatomy of the VMware vCenter Syslog Exploitation and the Babuk ESXi Ransomware\u00a0Campaign\n\nVMware vCenter CVE-2026-59310 is being actively exploited to compromise vCenter servers and deploy Babuk-derived\u2026\n\nhttps://thecybersecguru.com/news/vmware-vcenter-cve-2026-59310-babuk-esxi-ransomware/", "creation_timestamp": "2026-08-17T08:32:05.818496Z"}, {"uuid": "f913db18-4ea2-414b-bf41-78edace98233", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59310", "type": "seen", "source": "https://thehackernews.com/2026/08/attackers-exploit-vmware-vcenter.html", "content": "Threat actors have begun to actively exploit a recently patched critical security flaw in Broadcom VMware vCenter, according to new findings from QUIRSO.\n\nThe vulnerability in question is CVE-2026-59310 (CVSS score: 9.8), a directory-traversal vulnerability in the VMware vCenter server that a malicious actor with network access can exploit to execute arbitrary code. Patches for the flaw were", "creation_timestamp": "2026-08-12T13:02:06.843371Z"}, {"uuid": "e7c6a795-065c-4db0-b0e5-370038113b6e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59310", "type": "seen", "source": "https://bsky.app/profile/notreload.bsky.social/post/3mt2k4b6mh22q", "content": "Investors react to $AVGO XPV financing concerns and a severe VMware vulnerability (CVE-2026-59310) now under active exploitation worldwide. notreload.xyz/avgo-under-p...", "creation_timestamp": "2026-08-14T16:07:34.496179Z"}, {"uuid": "d53c1d73-3e8e-4ea1-871a-8fa668bcbf00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59310", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mt2k5l46522q", "content": "1/ \ud83d\udea8 VMware vCenter has a critical flaw (CVE-2026-59310, CVSS 9.8) under active exploitation. Attackers get remote code execution, then plant cron jobs to stay in. Patched in July, attacked five days later. Patch NOW.", "creation_timestamp": "2026-08-14T16:08:15.093403Z"}, {"uuid": "33b86547-ad32-435e-9faf-c0c1afc72f78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59310", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mt2k5l4dyk2q", "content": "1/ \ud83d\udea8 VMware vCenter has a critical flaw (CVE-2026-59310, CVSS 9.8) under active exploitation. Attackers get remote code execution, then plant cron jobs to stay in. Patched in July, attacked five days later. Patch NOW.", "creation_timestamp": "2026-08-14T16:08:16.078916Z"}, {"uuid": "a5bc22f6-1e52-4862-b086-467d173061aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59310", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mt2k5l4gwc2q", "content": "1/ \ud83d\udea8 VMware vCenter has a critical flaw (CVE-2026-59310, CVSS 9.8) under active exploitation. Attackers get remote code execution, then plant cron jobs to stay in. Patched in July, attacked five days later. Patch NOW.", "creation_timestamp": "2026-08-14T16:08:18.036533Z"}, {"uuid": "1c0affb0-521a-4f8d-a97e-c8c597d5b21f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-59310", "type": "seen", "source": "https://gist.github.com/cyberupdates365/e074f54d6cb285825fd5b26bbd1b8766", "content": "# Critical VMware vCenter Flaw Exploited by China APT: Patch Now!\n\nHackers are actively exploiting the VMware vCenter flaw CVE-2026-59310 to deploy Babuk ransomware on ESXi hosts. Read our technical breakdown.\n\nEnterprise virtualization infrastructure remains the primary target for advanced persistent threats seeking total network dominance. A devastating new attack campaign has proven that patching delays of even a few days can lead to catastrophic data center compromise.\n\nThe VMware vCenter flaw CVE-2026-59310 is currently being actively exploited by a highly sophisticated, suspected China-nexus threat actor. This critical directory traversal vulnerability allows attackers to execute arbitrary code with root privileges, deploy persistent webshells, and ultimately encrypt ESXi environments with Babuk-derived ransomware.\n\n\ud83d\udd17 **[Read the Full Technical Breakdown, Explore the C2 WebSockets, and View Mitigation Steps on CyberUpdates365](https://cyberupdates365.com/vmware-vcenter-flaw-cve-2026-59310-exploited/)**", "creation_timestamp": "2026-08-17T10:28:34.006781Z"}, {"uuid": "43771468-58b1-4994-adb5-c41686aacbab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59310", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mt2k5l4fx22q", "content": "1/ \ud83d\udea8 VMware vCenter has a critical flaw (CVE-2026-59310, CVSS 9.8) under active exploitation. Attackers get remote code execution, then plant cron jobs to stay in. Patched in July, attacked five days later. Patch NOW.", "creation_timestamp": "2026-08-14T16:08:17.089166Z"}, {"uuid": "626f88e3-1b3b-4848-aa7e-1243a23fe41c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59310", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mt2k5l4hvk2q", "content": "1/ \ud83d\udea8 VMware vCenter has a critical flaw (CVE-2026-59310, CVSS 9.8) under active exploitation. Attackers get remote code execution, then plant cron jobs to stay in. Patched in July, attacked five days later. Patch NOW.", "creation_timestamp": "2026-08-14T16:08:18.991884Z"}, {"uuid": "0540cbd5-ae13-4bb8-a9c4-e1091a321478", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59310", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mt2k5l4ius2q", "content": "1/ \ud83d\udea8 VMware vCenter has a critical flaw (CVE-2026-59310, CVSS 9.8) under active exploitation. Attackers get remote code execution, then plant cron jobs to stay in. Patched in July, attacked five days later. Patch NOW.", "creation_timestamp": "2026-08-14T16:08:20.478780Z"}, {"uuid": "62906581-96c0-4c07-aaae-924be2da683e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59310", "type": "seen", "source": "https://bsky.app/profile/newsfacts.bsky.social/post/3msvdrlgthe23", "content": "Cyberdreiging treft VMware vCenter via kritieke kwetsbaarheid.\n\nEr is een actieve cybercampagne gaande die zich richt op internettoegankelijke VMware vCenter-instanties. Geavanceerde persistente dreigingsactoren (APT's) maken hierbij gebruik van CVE-2026-59310, een kritieke...", "creation_timestamp": "2026-08-12T14:30:51.260905Z"}, {"uuid": "daef9b6a-8e77-4685-baad-7e1c20289707", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59310", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mt2k5l4ju42q", "content": "1/ \ud83d\udea8 VMware vCenter has a critical flaw (CVE-2026-59310, CVSS 9.8) under active exploitation. Attackers get remote code execution, then plant cron jobs to stay in. Patched in July, attacked five days later. Patch NOW.", "creation_timestamp": "2026-08-14T16:08:31.951746Z"}, {"uuid": "d3eb2bb2-535b-439a-9cde-130b35eea723", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59310", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mt2k5l4iut2q", "content": "1/ \ud83d\udea8 VMware vCenter has a critical flaw (CVE-2026-59310, CVSS 9.8) under active exploitation. Attackers get remote code execution, then plant cron jobs to stay in. Patched in July, attacked five days later. Patch NOW.", "creation_timestamp": "2026-08-14T16:08:29.042318Z"}, {"uuid": "f1585c65-a88a-40d8-8849-1d78410727b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59310", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mt2k5l4iuu2q", "content": "1/ \ud83d\udea8 VMware vCenter has a critical flaw (CVE-2026-59310, CVSS 9.8) under active exploitation. Attackers get remote code execution, then plant cron jobs to stay in. Patched in July, attacked five days later. Patch NOW.", "creation_timestamp": "2026-08-14T16:08:29.995013Z"}, {"uuid": "0be34549-4df6-4f5a-acc3-0e5851a369e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59310", "type": "seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/117083157864143789", "content": "\ud83d\udcf0 VMware Patches Critical VM Escape Flaw (CVE-2026-47876) in ESXi\nBroadcom patches critical VMware flaws, including a VM escape in ESXi (CVE-2026-47876) and unauthenticated RCE in vCenter (CVE-2026-59309, CVE-2026-59310). CVSS scores up to 9.8. Immediate patching is crucial. #VMware #CyberSecurity #PatchTuesday\n\ud83d\udd17 https://cyber.netsecops.io/articles/vmware-patches-critical-vm-escape-vulnerability-cve-2026-47876-in-esxi/?utm_source=mastodon&utm_medium=social&utm_campaign=daily", "creation_timestamp": "2026-08-12T15:06:54.515029Z"}, {"uuid": "a5d6c9cb-b1cf-4b7d-b0a7-7ec330645577", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59310", "type": "seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3msvfsvfbco2w", "content": "Broadcom patches critical VMware flaws, including a VM escape in ESXi (CVE-2026-47876) and unauthenticated RCE in vCenter (CVE-2026-59309, CVE-2026-59310). CVSS scores up to 9.8. Immediate patching is crucial. #VMware #CyberSecurity #PatchTuesday\n\n\ud83c\udf10 cyber[.]netsecops[.]io", "creation_timestamp": "2026-08-12T15:07:22.413671Z"}, {"uuid": "688e6f2d-1331-4404-a75b-fef8e6a260c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59310", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mtbjtdld5v2a", "content": "Broadcom VMware vCenter CVE-2026-59310 exploitation is linked to a China-nexus APT, compromising 361 IPs across 47 countries after the July 29, 2026 patch.\n", "creation_timestamp": "2026-08-17T10:51:09.817371Z"}, {"uuid": "b2172373-7bbc-4029-836c-e24689a17cff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59310", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mt2t62fdzk22", "content": "Critical VMware vCenter RCE flaw exploited for reverse SSH access\n\nA recently patched critical vulnerability (CVE-2026-59310) in VMware vCenter Syslog Server is being exploited in an active campaign to deploy a reverse SSH tool for persistence and remote access. [...]\n#hackernews #news", "creation_timestamp": "2026-08-14T18:49:34.817228Z"}, {"uuid": "2eb6c2dc-78c2-4161-a286-06c5f2a81f48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59310", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mtbnieobz72x", "content": "\ud83e\udd16 CVE-2026-59310 (CVSS 9.8): China-nexus APT exploiting VMware vCenter directory-traversal flaw, deploying Babuk-derived ransomware. Newly patched, already exploited in the wild \u2014 patch now.\n\nhttps://thehackernews.com/2026/08/suspected-china-nexus-actor-exploits.html", "creation_timestamp": "2026-08-17T11:56:36.541493Z"}, {"uuid": "3b5cff87-2e97-4dc4-96d7-28b79020dc87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59310", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mtezt2un5p22", "content": "~Cisa~\nCISA added four actively exploited vulnerabilities to its KEV Catalog, including flaws in Microsoft and VMware products.\n-\nIOCs: CVE-2026-33824, CVE-2026-55040, CVE-2026-59310\n-\n#CISA #KEV #ThreatIntel", "creation_timestamp": "2026-08-18T20:15:19.769586Z"}, {"uuid": "9bc13dd0-99f8-48d1-a516-d5f70e815176", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59310", "type": "seen", "source": "https://bsky.app/profile/ifin-intel.org/post/3mt2x5po4dk2b", "content": "Correction: The YARA rule is for another MISP event (CVE-2026-59310). We will continue to update this one as more information is released.", "creation_timestamp": "2026-08-14T20:00:58.072478Z"}, {"uuid": "911ac0af-e6a4-4683-b301-d5715552af04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-59310", "type": "seen", "source": "https://bsky.app/profile/blindthoughts.bsky.social/post/3mtbonhadnq24", "content": "CVE-2026-59310: China-Nexus APT Actively Exploiting Critical VMware vCenter Flaw\n\nhttps://blindthoughts.com/cve-2026-59310-vmware-vcenter-apt-exploitation\n\n#vmware #vcenter #ransomware #apt #criticalvulnerability", "creation_timestamp": "2026-08-17T12:17:20.475360Z"}, {"uuid": "22d31bc1-2121-4645-93fb-3cbc727134be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59310", "type": "seen", "source": "https://bsky.app/profile/techstart.bsky.social/post/3msvntqom7t2c", "content": "Cibercriminosos exploram ativamente falha cr\u00edtica CVE-2026-59310 no VMware vCenter para obter acesso remoto persistente a servidores corporativos.", "creation_timestamp": "2026-08-12T17:31:02.092543Z"}, {"uuid": "cae15cc6-8425-4476-9a63-44327ff1d8f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59310", "type": "seen", "source": "https://bsky.app/profile/csirts.com/post/3mtf3guah5n27", "content": "\ud83d\udea8 Added to CISA KEV \u2014 actively exploited:\nCVE-2026-59310: Broadcom VMware vCenter Path Traversal Vulnerability\n\nhttps://www.csirts.com/cve/CVE-2026-59310", "creation_timestamp": "2026-08-18T20:44:17.032945Z"}, {"uuid": "047d80bb-94bb-4b08-91c3-70b6233b6157", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59310", "type": "seen", "source": "https://bsky.app/profile/kotosecurity.bsky.social/post/3mtnsn5sowx2a", "content": "\ud83d\udee1\ufe0f VMWARE: vCenter Syslog Server CVE-2026-59310 \u2014 CVSS 9.8 directory traversal \u2192 unauth RCE. Network access to vCenter syslog port = full compromise. Broadcom advisory: restrict syslog access, monitor for patches. Src: Ermer & Suter PLLC", "creation_timestamp": "2026-08-22T08:00:42.131194Z"}, {"uuid": "89670a57-37d1-4cbc-b79c-ea8898e5008d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59310", "type": "seen", "source": "https://bsky.app/profile/deafnews-auto.bsky.social/post/3mtodqjhbzp2f", "content": "CVE-2026-59310: vCenter Exploited in 5 Days, 360+ IPs Compromised", "creation_timestamp": "2026-08-22T13:06:49.009331Z"}, {"uuid": "947781ae-2902-44b3-9a69-54c9a48ffe51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59310", "type": "seen", "source": "https://bsky.app/profile/packetstorm.bsky.social/post/3msvtfrwkya2n", "content": "361 Victim IPs Across 47 Countries Actively Exploited By CVE-2026-59310 https://packetstorm.news/news/view/42737 #news", "creation_timestamp": "2026-08-12T19:10:35.142352Z"}, {"uuid": "326efc38-08d4-41a1-8130-a4004425e30e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59310", "type": "seen", "source": "https://thehackernews.com/2026/08/suspected-china-nexus-actor-exploits.html", "content": "Cybersecurity researchers have attributed the exploitation of a newly patched security flaw in Broadcom VMware vCenter to a suspected China-nexus advanced persistent threat (APT).\n\nThe attacks involve the exploitation of CVE-2026-59310 (CVSS score: 9.8), a severe directory-traversal vulnerability in the VMware vCenter server that could be weaponized by a malicious actor to execute arbitrary code", "creation_timestamp": "2026-08-17T13:00:37.095058Z"}, {"uuid": "288dafd2-27e9-4da4-a0b7-d95a78816764", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-59310", "type": "seen", "source": "https://bsky.app/profile/etairos-ai.bsky.social/post/3mtbuoskvvt2t", "content": "CVE-2026-59310 turned into 361 ransomware footholds in 47 countries.\nA China-nexus APT is hitting vCenter, the control plane for your entire virtual estate.\n#ThreatIntel #ICS\nhttps://threat-intelligence.redeyesecurity.com/blog/china-nexus-vcenter-cve-2026-59310-babuk-ransomware-2026", "creation_timestamp": "2026-08-17T14:05:28.561287Z"}, {"uuid": "822427a2-07fc-44ae-8e6d-20a8ea3d1ad3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59310", "type": "seen", "source": "https://t.me/bdufstecru/3387", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441\u0435\u0440\u0432\u0435\u0440\u0430 Syslog Server \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u043e\u0439 VMware vCenter Server \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0432\u0435\u0440\u043d\u044b\u043c \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u0435\u043c \u0438\u043c\u0435\u043d\u0438 \u043f\u0443\u0442\u0438 \u043a \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0443. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434\n\nBDU:2026-11333\nCVE-2026-59310\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f:\nhttps://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/38017\nhttps://github.com/vmware/vcf-security-and-compliance-guidelines/tree/main/security-advisories/vmsa-2026-0006", "creation_timestamp": "2026-08-17T15:00:04.050681Z"}, {"uuid": "fc8ecde4-df7d-4da1-8eca-9d6c5a1a94a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59310", "type": "exploited", "source": "https://t.me/thehackernews/9787", "content": "\ud83d\udea8 Watch out: Attackers are exploiting VMware vCenter for persistence.\n\nAfter exploiting CVE-2026-59310, they planted a malicious cron job running reverse_ssh to maintain access. Researchers identified up to 361 victim IPs across 47 countries.\n\nRead more: https://thehackernews.com/2026/08/attackers-exploit-vmware-vcenter.html", "creation_timestamp": "2026-08-13T00:00:09.613486Z"}, {"uuid": "4a528305-a850-4aae-b34c-823af76623cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59310", "type": "seen", "source": "https://thehackernews.com/2026/08/attackers-exploit-vmware-vcenter.html", "content": "Threat actors have begun to actively exploit a recently patched critical security flaw in Broadcom VMware vCenter, according to new findings from QUIRSO.\n\nThe vulnerability in question is CVE-2026-59310 (CVSS score: 9.8), a directory-traversal vulnerability in the VMware vCenter server that a malicious actor with network access can exploit to execute arbitrary code. Patches for the flaw were", "creation_timestamp": "2026-08-13T01:00:35.257220Z"}, {"uuid": "5f2280fb-bf83-4df6-8788-5ee80a66b66d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59310", "type": "exploited", "source": "https://t.me/pphm_HackerNews/2675", "content": "\ud83d\udd34 Suspected China-Nexus Actor Exploits VMware vCenter Flaw, Deploys Babuk-Derived Ransomware\n\nCybersecurity researchers have attributed the exploitation of a newly patched security flaw in Broadcom VMware vCenter to a suspected China-nexus advanced persistent threat (APT).\n\nThe attacks involve the exploitation of CVE-2026-59310 (CVSS score: 9.8), a severe directory-traversal vulnerability in the VMware vCenter server that could be weaponized by a malicious actor to execute arbitrary code. A fix for the flaw was released by Broadcom on July 29, 2026.\n\nGerman incident response company QUIRSO assessed with moderate confidence that the exploitation campaign aimed at CVE-2026-59310 is operated by a Chinese-speaking threat actor, likely working in the UTC+08:00 time zone, which is predominantly used in Chinese-speaking regions.", "creation_timestamp": "2026-08-22T00:00:08.991260Z"}, {"uuid": "4cdda12f-1dc1-4c50-8695-1fea06751d74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59310", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mswqlekf4j2j", "content": "Top 3 CVE for last 7 days:\nCVE-2026-64564: 32 interactions\nCVE-2026-68820: 26 interactions\nCVE-2026-64638: 19 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-68820: 16 interactions\nCVE-2026-59310: 7 interactions\nCVE-2026-70329: 4 interactions\n", "creation_timestamp": "2026-08-13T03:52:40.949506Z"}, {"uuid": "aadeb33a-20f4-48d0-b2e1-3334df2a2d71", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59310", "type": "seen", "source": "Telegram/DqV-nqMSCmTU-M49w7S4IFLGMz_hqpuL1Ny1I6RAHqLyMqU", "content": "", "creation_timestamp": "2026-08-17T18:00:04.032019Z"}, {"uuid": "2c190a07-04eb-407f-a6f6-a6a19e66e415", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59310", "type": "seen", "source": "Telegram/ZW4ojZ7_vjjQly6kNHFOeaiYPS6mgd_SqnYt7bD0niZpGdI", "content": "", "creation_timestamp": "2026-08-17T18:00:04.285088Z"}, {"uuid": "0f4dd996-a752-425a-9cf7-ccfa138a3a44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59310", "type": "published-proof-of-concept", "source": "https://github.com/google/tsunami-security-scanner-plugins/blob/master/templated/templateddetector/plugins/cve/2026/VMWareVCenter_CVE_2026_59310.textproto", "content": "", "creation_timestamp": "2026-08-06T10:15:02.326142Z"}, {"uuid": "44f43f0d-3daa-4a54-aae4-2d79494a3d19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59310", "type": "exploited", "source": "Telegram/e3CgSdeoLuvzVAvy_SPtqPYT4XhVR7XxObtYTXenw7wOdA", "content": "", "creation_timestamp": "2026-08-15T00:00:48.955056Z"}, {"uuid": "5909b426-8dfd-4f3d-83d7-fa813a6f6287", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59310", "type": "seen", "source": "https://t.me/pphm_HackerNews/2598", "content": "\ud83d\udd34 Attackers Exploit VMware vCenter Vulnerability to Gain Persistent Remote Access\n\nThreat actors have begun to actively exploit a recently patched critical security flaw in Broadcom VMware vCenter, according to new findings from QUIRSO.\n\nThe vulnerability in question is CVE-2026-59310 (CVSS score: 9.8), a directory-traversal vulnerability in the VMware vCenter server that a malicious actor with network access can exploit to execute arbitrary code. Patches for the flaw were released by Broadcom late last month.\n\nThe German cybersecurity company said it discovered the activity following an incident response engagement. The attack chain is said to have exhibited path traversal activity consistent with the flaw, followed by the deployment of a malicious cron job to establish persistence on the host using reverse_ssh, an open-source tool used for setting up SSH connections to threat actor-controlled infrastructure.", "creation_timestamp": "2026-08-22T00:00:09.803970Z"}, {"uuid": "0ba2721e-1d3f-417e-9318-2db860e40f60", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59310", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mt3nazlyin2t", "content": "Top 3 CVE for last 7 days:\nCVE-2026-68820: 39 interactions\nCVE-2026-59310: 36 interactions\nCVE-2026-64638: 17 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-59310: 18 interactions\nCVE-2026-59309: 9 interactions\nCVE-2026-15718: 8 interactions\n", "creation_timestamp": "2026-08-15T02:36:31.252223Z"}, {"uuid": "3497e0e1-e1ca-4e2b-a9ff-395d84fb1180", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59310", "type": "seen", "source": "https://t.me/true_secator/8510", "content": "\u041d\u0435\u0434\u0430\u0432\u043d\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0430\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f CVE-2026-59310 \u0432 VMware vCenter Syslog Server \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438 \u043f\u043e \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044e \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430 \u043e\u0431\u0440\u0430\u0442\u043d\u043e\u0433\u043e SSH \u0434\u043b\u044f \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u043f\u043e\u0441\u0442\u043e\u044f\u043d\u043d\u043e\u0433\u043e \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u044f \u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430.\n\nVMware vCenter - \u044d\u0442\u043e \u0446\u0435\u043d\u0442\u0440\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u0435 \u041f\u041e \u0434\u043b\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f, \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433\u0430 \u0438 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b VMware \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0435 \u043c\u0430\u0448\u0438\u043d\u044b, \u0441\u0435\u0440\u0432\u0435\u0440\u044b ESXi, \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u0438 \u043f\u0440\u0430\u0432\u0430 \u0434\u043e\u0441\u0442\u0443\u043f\u0430.\n\n\u0420\u0435\u0448\u0435\u043d\u0438\u0435 \u0447\u0430\u0441\u0442\u043e \u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u0441\u044f \u043c\u0438\u0448\u0435\u043d\u044c\u044e \u0438\u0437-\u0437\u0430 \u0448\u0438\u0440\u043e\u043a\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0443 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u0430\u0436\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u044d\u0442\u043e\u0442 \u0434\u043e\u0441\u0442\u0443\u043f \u0434\u043b\u044f \u043a\u0440\u0430\u0436\u0438 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438 \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u0441\u0438\u0441\u0442\u0435\u043c.\n\n\u0412\u0437\u043b\u043e\u043c \u0431\u044b\u043b \u0432\u044b\u044f\u0432\u043b\u0435\u043d \u043d\u0430 361 IP-\u0430\u0434\u0440\u0435\u0441\u0435 \u0432 47 \u0441\u0442\u0440\u0430\u043d\u0430\u0445, \u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u043b\u043e\u0432\u0438\u043d\u044b \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043d\u0430\u0445\u043e\u0434\u044f\u0442\u0441\u044f \u0432 \u0413\u0435\u0440\u043c\u0430\u043d\u0438\u0438, \u0421\u0428\u0410, \u0422\u0443\u0440\u0446\u0438\u0438, \u0418\u0440\u0430\u043d\u0435 \u0438 \u0424\u0440\u0430\u043d\u0446\u0438\u0438.\n\n29 \u0438\u044e\u043b\u044f Broadcom \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0430 CVE-2026-59310, \u043e\u043f\u0438\u0441\u0430\u0432 \u0435\u0451 \u043a\u0430\u043a\u00a0\u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u043e\u0432\u00a0\u0432 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 Syslog vCenter, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c, \u0438\u043c\u0435\u044e\u0449\u0438\u043c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0435\u0442\u0438, \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0431\u044b\u043b\u0430 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u0432 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 vCenter 9.1.0.0300, 9.0.2.0100, 8.0 U3k \u0438\u043b\u0438 8.0 U2f. \n\n\u041f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a \u043d\u0435 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u043e\u0431\u0445\u043e\u0434\u043d\u044b\u0445 \u043f\u0443\u0442\u0435\u0439 \u0438\u043b\u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u043e\u0432 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0438 \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u043c \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0438 \u043e\u0437\u043d\u0430\u043a\u043e\u043c\u0438\u0442\u044c\u0441\u044f \u0441 \u0440\u0430\u0437\u0434\u0435\u043b\u043e\u043c FAQ \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c QUIRSO, \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043d\u0430\u0447\u0430\u043b\u0438 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0430\u0442\u044c\u0441\u044f \u043a \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0435, \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u043e\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438, 3 \u0430\u0432\u0433\u0443\u0441\u0442\u0430, \u0432\u0441\u0435\u0433\u043e \u0447\u0435\u0440\u0435\u0437 \u043f\u044f\u0442\u044c \u0434\u043d\u0435\u0439 \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a Broadcom \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435.\n\n\u041a\u0430\u043c\u043f\u0430\u043d\u0438\u044f \u0431\u044b\u0441\u0442\u0440\u043e \u0440\u0430\u0437\u0440\u043e\u0441\u043b\u0430\u0441\u044c: 4 \u0430\u0432\u0433\u0443\u0441\u0442\u0430 \u0431\u044b\u043b \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d 151 \u043d\u043e\u0432\u044b\u0439 IP \u0436\u0435\u0440\u0442\u0432. \u041a \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u043c\u0443 \u0434\u043d\u044e \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e IP-\u0430\u0434\u0440\u0435\u0441\u043e\u0432 \u0436\u0435\u0440\u0442\u0432 \u0434\u043e\u0441\u0442\u0438\u0433\u043b\u043e 343. \u041e\u0434\u043d\u0430\u043a\u043e, \u043a\u0430\u043a \u043e\u0442\u043c\u0435\u0447\u0430\u0435\u0442 QUIRSO, \u043a 7 \u0430\u0432\u0433\u0443\u0441\u0442\u0430 \u0431\u044b\u043b\u043e \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043e \u0432 \u043e\u0431\u0449\u0435\u0439 \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438 361 IP \u0436\u0435\u0440\u0442\u0432.\n\n\u041f\u043e\u043b\u0443\u0447\u0438\u0432 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c vCenter, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0440\u0430\u0437\u0432\u0435\u0440\u043d\u0443\u043b \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c reverse_ssh \u0434\u043b\u044f \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u043f\u043e\u0441\u0442\u043e\u044f\u043d\u043d\u043e\u0433\u043e \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u044f \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0438 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430.\n\n\u041e\u0431\u0440\u0430\u0442\u043d\u043e\u0435 SSH-\u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0435 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u0435\u0442 \u0438\u0441\u0445\u043e\u0434\u044f\u0449\u0438\u0439 \u043a\u0430\u043d\u0430\u043b C2 \u0438 \u043c\u043e\u0436\u0435\u0442 \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u043c\u043e\u0447\u044c \u043e\u0431\u043e\u0439\u0442\u0438 \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440\u044b \u0438\u043b\u0438 \u0434\u0440\u0443\u0433\u0438\u0435 \u043c\u0435\u0440\u044b \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.\n\nQUIRSO \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0430\u043b\u044c\u043d\u043e\u0435 \u043f\u0440\u0430\u0432\u0438\u043b\u043e YARA, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0432\u0430\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u00a0reverse_ssh. \u0421\u043b\u0435\u0434\u0443\u0435\u0442 \u043e\u0442\u043c\u0435\u0442\u0438\u0442\u044c, \u0447\u0442\u043e \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0435 \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043f\u0440\u0438 \u043b\u0435\u0433\u0438\u0442\u0438\u043c\u043d\u043e\u043c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u044d\u0442\u043e\u0433\u043e \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043f\u043e\u043b\u0430\u0433\u0430\u044e\u0442, \u0447\u0442\u043e \u0437\u0430 \u044d\u0442\u043e\u0439 \u0434\u0435\u044f\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u044c\u044e \u0441\u0442\u043e\u0438\u0442 \u0433\u0440\u0443\u043f\u043f\u0430 \u043a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a\u043e\u0432, \u0445\u043e\u0442\u044f \u043e\u043d\u0438 \u043d\u0435 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u043b\u0438 \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u0434\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432 \u0432 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0443 \u044d\u0442\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 \u0438 \u043d\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0430\u044e\u0442 \u043a\u043e\u043d\u043a\u0440\u0435\u0442\u043d\u044b\u0435 \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u0438 \u0432 \u0441\u0432\u044f\u0437\u0438 \u0441 \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u044e\u0449\u0438\u043c\u0441\u044f \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0435 \u0441 \u0443\u0447\u0430\u0441\u0442\u0438\u0435\u043c \u043f\u0440\u0430\u0432\u043e\u043e\u0445\u0440\u0430\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u043e\u0440\u0433\u0430\u043d\u043e\u0432.\n\nQUIRSO \u043f\u043b\u0430\u043d\u0438\u0440\u0443\u0435\u0442 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u044b\u0439 \u043e\u0442\u0447\u0435\u0442, \u043e\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u044e\u0449\u0438\u0439 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0435 \u043c\u0435\u0442\u043e\u0434\u044b, \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u043a\u0440\u0435\u043f\u043b\u0435\u043d\u0438\u044f \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0438 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u043f\u043e\u0441\u043b\u0435 \u0432\u0437\u043b\u043e\u043c\u0430, \u043d\u043e \u043f\u043e\u0437\u0436\u0435.", "creation_timestamp": "2026-08-15T05:00:03.407130Z"}, {"uuid": "d4edf05a-349d-412b-bb43-1f084b81a0a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59310", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3msxd6gmrrb2j", "content": "Threat actors exploit CVE-2026-59310 in VMware vCenter to achieve remote code execution and maintain persistent access via reverse_ssh.\n", "creation_timestamp": "2026-08-13T09:25:28.147026Z"}, {"uuid": "6172818b-8325-46a6-ba3d-0624ddefc4ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59310", "type": "seen", "source": "https://bsky.app/profile/intelnightowl.bsky.social/post/3msxebvkmwe2n", "content": "Cyberattack campaign exploits VMware vCenter CVE-2026-59310, deploying reverse SSH across 47 countries. #Cyberattack #VMware #vCenter #CVE202659310 #reverseSSH #47Countries https://gbhackers.com/hackers-exploit-critical-vmware-vcenter-flaw/", "creation_timestamp": "2026-08-13T09:45:18.518772Z"}, {"uuid": "ae922a3b-b65f-4647-990a-f2e895f962bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59310", "type": "published-proof-of-concept", "source": "Telegram/ZW4ojZ7_vjjQly6kNHFOeaiYPS6mgd_SqnYt7bD0niZpGdI", "content": "", "creation_timestamp": "2026-08-18T00:00:12.371220Z"}, {"uuid": "26e37a53-6087-491c-8205-426b64f494da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59310", "type": "published-proof-of-concept", "source": "Telegram/DqV-nqMSCmTU-M49w7S4IFLGMz_hqpuL1Ny1I6RAHqLyMqU", "content": "", "creation_timestamp": "2026-08-18T00:00:12.694838Z"}, {"uuid": "7d38ed82-b354-4a1b-a81d-7a7a6eeeafd9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59310", "type": "published-proof-of-concept", "source": "https://t.me/bdufstecru/3387", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441\u0435\u0440\u0432\u0435\u0440\u0430 Syslog Server \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u043e\u0439 VMware vCenter Server \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0432\u0435\u0440\u043d\u044b\u043c \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u0435\u043c \u0438\u043c\u0435\u043d\u0438 \u043f\u0443\u0442\u0438 \u043a \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0443. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434\n\nBDU:2026-11333\nCVE-2026-59310\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f:\nhttps://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/38017\nhttps://github.com/vmware/vcf-security-and-compliance-guidelines/tree/main/security-advisories/vmsa-2026-0006", "creation_timestamp": "2026-08-18T00:00:28.402881Z"}, {"uuid": "54dbdebe-1a0e-485a-854e-1ebc4cf79f69", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59310", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mtfphlrqnl22", "content": "Top 3 CVE for last 7 days:\nCVE-2026-59310: 43 interactions\nCVE-2026-68820: 31 interactions\nCVE-2026-65400: 17 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-19478: 6 interactions\nCVE-2026-43499: 6 interactions\nCVE-2025-62593: 5 interactions\n", "creation_timestamp": "2026-08-19T02:42:36.360538Z"}, {"uuid": "7b281a50-f78f-4814-b671-3e2ff263bfde", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59310", "type": "seen", "source": "https://thehackernews.com/2026/08/suspected-china-nexus-actor-exploits.html", "content": "Cybersecurity researchers have attributed the exploitation of a newly patched security flaw in Broadcom VMware vCenter to a suspected China-nexus advanced persistent threat (APT).\n\nThe attacks involve the exploitation of CVE-2026-59310 (CVSS score: 9.8), a severe directory-traversal vulnerability in the VMware vCenter server that could be weaponized by a malicious actor to execute arbitrary code", "creation_timestamp": "2026-08-18T01:00:31.726512Z"}, {"uuid": "c15dedbd-a9e6-496d-a600-a62f2923a241", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-59310", "type": "seen", "source": "https://www.cert.dk/news/2026-08-13/Kritisk-VMware-vCente-saarbarhed-misbruges-aktivt-paa-tvaers-af-47-lande", "content": "", "creation_timestamp": "2026-08-13T10:22:07.050431Z"}, {"uuid": "94b0d6f0-ca20-4930-846a-0bf892206ff9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59310", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mtd6tqh63a2z", "content": "Top 3 CVE for last 7 days:\nCVE-2026-68820: 41 interactions\nCVE-2026-59310: 38 interactions\nCVE-2026-65400: 15 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-65400: 9 interactions\nCVE-2025-62593: 8 interactions\nCVE-2026-69414: 8 interactions\n", "creation_timestamp": "2026-08-18T02:39:51.000115Z"}, {"uuid": "6c9a1837-45e8-485b-9d16-3fd9a83ec6e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59310", "type": "seen", "source": "https://bsky.app/profile/hackread.bsky.social/post/3msxkwmpg3c2x", "content": "\ud83d\udce2 \u26a0\ufe0f Researchers have linked 361 victim IPs in 47 countries to a suspected APT campaign exploiting a critical VMware vCenter flaw, CVE-2026-59310.\n\nListen/Read: hackread.com/apt-exploits...\n\n#CyberSecurity #VMware #vCenter #APT #Vulnerability", "creation_timestamp": "2026-08-13T11:44:17.409161Z"}, {"uuid": "b7d3360b-da86-4de9-8ae8-c30757a62c44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59310", "type": "seen", "source": "https://mstdn.social/users/Hackread/statuses/117088023956001840", "content": "\ud83d\udce2 \u26a0\ufe0f Researchers have linked 361 victim IPs in 47 countries to a suspected APT campaign exploiting a critical VMware vCenter flaw, CVE-2026-59310.\nListen/Read: https://hackread.com/apt-exploits-critical-vmware-vcenter-vulnerabilities/\n#CyberSecurity #VMware #vCenter #APT #Vulnerability", "creation_timestamp": "2026-08-13T11:44:27.056499Z"}, {"uuid": "01ad7ac1-e395-4ce2-90e7-7650a64321b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-59310", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/vmware-products-multiple-vulnerabilities_20260814", "content": "", "creation_timestamp": "2026-08-20T20:45:02.585318Z"}, {"uuid": "cbf2813f-b4ca-4768-93d9-3912d03aefd4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59310", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3msxtcbmtpo2k", "content": "Attackers are exploiting CVE-2026-59310, a critical directory-traversal vulnerability in VMware vCenter (CVSS score: 9.8), to gain persistent remote access. Discovered by QUIRSO, the exploitation began shortly after Broadcom's patch release.", "creation_timestamp": "2026-08-13T14:13:58.099001Z"}, {"uuid": "b762c599-03ca-450b-a23f-22bbe7e361b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59310", "type": "seen", "source": "https://bsky.app/profile/diesec.bsky.social/post/3mtdqqiye6n2t", "content": "VMware vCenter CVE-2026-59310 (CVSS 9.8): exploited in 47 countries, Germany hit hardest. Attackers open reverse-SSH tunnels that bypass inbound firewalls. Patch now, audit outbound SSH.\n\n\ud83c\uddec\ud83c\udde7 zurl.co/7mCwu\n\ud83c\udde9\ud83c\uddea zurl.co/5OFGq \n\n#CyberSecurity #VMware #CISA", "creation_timestamp": "2026-08-18T08:00:10.520350Z"}, {"uuid": "de1330d6-e566-48e7-9215-94c2ccee03d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59310", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mtdt2v2hm52b", "content": "VMware vCenter's Syslog vulnerability (CVE-2026-59310) is being exploited for root access and ransomware deployment. Immediate patching is crucial. #VMware #vCenter #Syslog https://thedailytechfeed.com/vmware-syslog-vulnerability-exploited-for-root-access-and-ransomware-deployment/", "creation_timestamp": "2026-08-18T08:41:46.490970Z"}, {"uuid": "163e8304-546e-4b72-b977-d71ec3335fa1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59310", "type": "seen", "source": "https://bsky.app/profile/bleepingcomputer.com/post/3msy3irsqzi2t", "content": "A recently patched critical vulnerability (CVE-2026-59310) in VMware vCenter Syslog Server is being exploited in an active campaign to deploy a reverse SSH tool for persistence and remote access.", "creation_timestamp": "2026-08-13T16:40:44.789205Z"}, {"uuid": "57c7032c-85bf-431b-a8f6-fd400b2393e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59310", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3msy3ziqs762q", "content": "VMware\u306evCenter\u3067\u898b\u3064\u304b\u3063\u305f\u6df1\u523b\u306aRCE\u8106\u5f31\u6027\u3001\u30ea\u30d0\u30fc\u30b9SSH\u30a2\u30af\u30bb\u30b9\u306e\u624b\u6bb5\u3068\u3057\u3066\u60aa\u7528\n\nVMware vCenter Syslog Server\u306b\u5b58\u5728\u3059\u308b\u6df1\u523b\u306a\u8106\u5f31\u6027(CVE-2026-59310)\u304c\u6700\u8fd1\u30d1\u30c3\u30c1\u9069\u7528\u3055\u308c\u305f\u3070\u304b\u308a\u3067\u3059\u304c\u3001\u3053\u306e\u8106\u5f31\u6027\u3092\u60aa\u7528\u3057\u3066\u30ea\u30d0\u30fc\u30b9SSH\u30c4\u30fc\u30eb\u3092\u5c55\u958b\u3057\u3001\u6c38\u7d9a\u5316\u3068\u30ea\u30e2\u30fc\u30c8\u30a2\u30af\u30bb\u30b9\u3092\u78ba\u7acb\u3059\u308b\u653b\u6483\u30ad\u30e3\u30f3\u30da\u30fc\u30f3\u304c\u78ba\u8a8d\u3055\u308c\u3066\u3044\u307e\u3059\u3002 \u3053\u308c\u307e\u3067\u306b47\u304b\u56fd\u3001361\u4ef6\u306eIP\u30a2\u30c9\u30ec\u30b9\u3067\u4fb5\u5bb3\u304c...", "creation_timestamp": "2026-08-13T16:50:05.949577Z"}, {"uuid": "0d143d50-f64f-468c-948c-bf4c5694e39c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59310", "type": "seen", "source": "https://bsky.app/profile/undercodenews.bsky.social/post/3msy63yz43623", "content": "VMware vCenter Under Attack: Critical CVE-2026-59310 Exploited in a Global Reverse-SSH Campaign +\u00a0Video\n\nIntroduction: A Five-Day Warning That A critical vulnerability in VMware vCenter has rapidly turned from a security advisory into an active global intrusion campaign. CVE-2026-59310, a directory\u2026", "creation_timestamp": "2026-08-13T17:27:17.941828Z"}, {"uuid": "4dfb7a55-ed10-43ef-abb5-476ece514d59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59310", "type": "seen", "source": "https://bsky.app/profile/getpacketai.bsky.social/post/3mtdvrojbb42t", "content": "China-linked APT actively exploiting critical VMware vCenter flaw (CVE-2026-59310) to deploy Babuk ransomware. Patch immediately if you're running vCenter infrastructure.\n\nhttps://thehackernews.com/2026/08/suspected-china-nexus-actor-exploits.html\n\n#cybersecurity #infosec", "creation_timestamp": "2026-08-18T09:30:17.945283Z"}, {"uuid": "fc8a03f0-d6d2-4610-b4f5-c573075dd27c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59310", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3msy6ehjoig2x", "content": "\ud83e\udd16 CVE-2026-59310 (critical): RCE in VMware vCenter Syslog Server exploited in the wild. Attackers deploy a reverse SSH tool for persistence. Patch now.\nhttps://www.bleepingcomputer.com/news/security/critical-vmware-vcenter-rce-flaw-exploited-for-reverse-ssh-access/", "creation_timestamp": "2026-08-13T17:32:01.239978Z"}, {"uuid": "d076811a-0ae6-47e5-b4cd-b9026b0a6616", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59310", "type": "seen", "source": "https://bsky.app/profile/uutis.bsky.social/post/3msy6kn66uj2j", "content": "Vahvistamattomien tietojen mukaan hy\u00f6kk\u00e4\u00e4j\u00e4t hy\u00f6dynt\u00e4v\u00e4t jo korjattua VMware vCenter Syslog Serverin kriittist\u00e4 haavoittuvuutta (CVE-2026-59310) p\u00e4\u00e4st\u00e4kseen k\u00e4siksi j\u00e4rjestelmiin k\u00e4\u00e4nteisen SSH-yhteyden avulla.\n\n#kyberturvallisuus", "creation_timestamp": "2026-08-13T17:35:29.040003Z"}, {"uuid": "7f9b5160-6e63-4ebd-87cd-4a1d91fc3cb3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59310", "type": "exploited", "source": "https://t.me/true_secator/8510", "content": "\u041d\u0435\u0434\u0430\u0432\u043d\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0430\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f CVE-2026-59310 \u0432 VMware vCenter Syslog Server \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438 \u043f\u043e \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044e \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430 \u043e\u0431\u0440\u0430\u0442\u043d\u043e\u0433\u043e SSH \u0434\u043b\u044f \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u043f\u043e\u0441\u0442\u043e\u044f\u043d\u043d\u043e\u0433\u043e \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u044f \u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430.\n\nVMware vCenter - \u044d\u0442\u043e \u0446\u0435\u043d\u0442\u0440\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u0435 \u041f\u041e \u0434\u043b\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f, \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433\u0430 \u0438 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b VMware \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0435 \u043c\u0430\u0448\u0438\u043d\u044b, \u0441\u0435\u0440\u0432\u0435\u0440\u044b ESXi, \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u0438 \u043f\u0440\u0430\u0432\u0430 \u0434\u043e\u0441\u0442\u0443\u043f\u0430.\n\n\u0420\u0435\u0448\u0435\u043d\u0438\u0435 \u0447\u0430\u0441\u0442\u043e \u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u0441\u044f \u043c\u0438\u0448\u0435\u043d\u044c\u044e \u0438\u0437-\u0437\u0430 \u0448\u0438\u0440\u043e\u043a\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0443 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u0430\u0436\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u044d\u0442\u043e\u0442 \u0434\u043e\u0441\u0442\u0443\u043f \u0434\u043b\u044f \u043a\u0440\u0430\u0436\u0438 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438 \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u0441\u0438\u0441\u0442\u0435\u043c.\n\n\u0412\u0437\u043b\u043e\u043c \u0431\u044b\u043b \u0432\u044b\u044f\u0432\u043b\u0435\u043d \u043d\u0430 361 IP-\u0430\u0434\u0440\u0435\u0441\u0435 \u0432 47 \u0441\u0442\u0440\u0430\u043d\u0430\u0445, \u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u043b\u043e\u0432\u0438\u043d\u044b \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043d\u0430\u0445\u043e\u0434\u044f\u0442\u0441\u044f \u0432 \u0413\u0435\u0440\u043c\u0430\u043d\u0438\u0438, \u0421\u0428\u0410, \u0422\u0443\u0440\u0446\u0438\u0438, \u0418\u0440\u0430\u043d\u0435 \u0438 \u0424\u0440\u0430\u043d\u0446\u0438\u0438.\n\n29 \u0438\u044e\u043b\u044f Broadcom \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0430 CVE-2026-59310, \u043e\u043f\u0438\u0441\u0430\u0432 \u0435\u0451 \u043a\u0430\u043a\u00a0\u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u043e\u0432\u00a0\u0432 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 Syslog vCenter, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c, \u0438\u043c\u0435\u044e\u0449\u0438\u043c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0435\u0442\u0438, \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0431\u044b\u043b\u0430 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u0432 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 vCenter 9.1.0.0300, 9.0.2.0100, 8.0 U3k \u0438\u043b\u0438 8.0 U2f. \n\n\u041f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a \u043d\u0435 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u043e\u0431\u0445\u043e\u0434\u043d\u044b\u0445 \u043f\u0443\u0442\u0435\u0439 \u0438\u043b\u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u043e\u0432 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0438 \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u043c \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0438 \u043e\u0437\u043d\u0430\u043a\u043e\u043c\u0438\u0442\u044c\u0441\u044f \u0441 \u0440\u0430\u0437\u0434\u0435\u043b\u043e\u043c FAQ \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c QUIRSO, \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043d\u0430\u0447\u0430\u043b\u0438 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0430\u0442\u044c\u0441\u044f \u043a \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0435, \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u043e\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438, 3 \u0430\u0432\u0433\u0443\u0441\u0442\u0430, \u0432\u0441\u0435\u0433\u043e \u0447\u0435\u0440\u0435\u0437 \u043f\u044f\u0442\u044c \u0434\u043d\u0435\u0439 \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a Broadcom \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435.\n\n\u041a\u0430\u043c\u043f\u0430\u043d\u0438\u044f \u0431\u044b\u0441\u0442\u0440\u043e \u0440\u0430\u0437\u0440\u043e\u0441\u043b\u0430\u0441\u044c: 4 \u0430\u0432\u0433\u0443\u0441\u0442\u0430 \u0431\u044b\u043b \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d 151 \u043d\u043e\u0432\u044b\u0439 IP \u0436\u0435\u0440\u0442\u0432. \u041a \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u043c\u0443 \u0434\u043d\u044e \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e IP-\u0430\u0434\u0440\u0435\u0441\u043e\u0432 \u0436\u0435\u0440\u0442\u0432 \u0434\u043e\u0441\u0442\u0438\u0433\u043b\u043e 343. \u041e\u0434\u043d\u0430\u043a\u043e, \u043a\u0430\u043a \u043e\u0442\u043c\u0435\u0447\u0430\u0435\u0442 QUIRSO, \u043a 7 \u0430\u0432\u0433\u0443\u0441\u0442\u0430 \u0431\u044b\u043b\u043e \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043e \u0432 \u043e\u0431\u0449\u0435\u0439 \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438 361 IP \u0436\u0435\u0440\u0442\u0432.\n\n\u041f\u043e\u043b\u0443\u0447\u0438\u0432 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c vCenter, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0440\u0430\u0437\u0432\u0435\u0440\u043d\u0443\u043b \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c reverse_ssh \u0434\u043b\u044f \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u043f\u043e\u0441\u0442\u043e\u044f\u043d\u043d\u043e\u0433\u043e \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u044f \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0438 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430.\n\n\u041e\u0431\u0440\u0430\u0442\u043d\u043e\u0435 SSH-\u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0435 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u0435\u0442 \u0438\u0441\u0445\u043e\u0434\u044f\u0449\u0438\u0439 \u043a\u0430\u043d\u0430\u043b C2 \u0438 \u043c\u043e\u0436\u0435\u0442 \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u043c\u043e\u0447\u044c \u043e\u0431\u043e\u0439\u0442\u0438 \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440\u044b \u0438\u043b\u0438 \u0434\u0440\u0443\u0433\u0438\u0435 \u043c\u0435\u0440\u044b \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.\n\nQUIRSO \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0430\u043b\u044c\u043d\u043e\u0435 \u043f\u0440\u0430\u0432\u0438\u043b\u043e YARA, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0432\u0430\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u00a0reverse_ssh. \u0421\u043b\u0435\u0434\u0443\u0435\u0442 \u043e\u0442\u043c\u0435\u0442\u0438\u0442\u044c, \u0447\u0442\u043e \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0435 \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043f\u0440\u0438 \u043b\u0435\u0433\u0438\u0442\u0438\u043c\u043d\u043e\u043c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u044d\u0442\u043e\u0433\u043e \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043f\u043e\u043b\u0430\u0433\u0430\u044e\u0442, \u0447\u0442\u043e \u0437\u0430 \u044d\u0442\u043e\u0439 \u0434\u0435\u044f\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u044c\u044e \u0441\u0442\u043e\u0438\u0442 \u0433\u0440\u0443\u043f\u043f\u0430 \u043a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a\u043e\u0432, \u0445\u043e\u0442\u044f \u043e\u043d\u0438 \u043d\u0435 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u043b\u0438 \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u0434\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432 \u0432 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0443 \u044d\u0442\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 \u0438 \u043d\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0430\u044e\u0442 \u043a\u043e\u043d\u043a\u0440\u0435\u0442\u043d\u044b\u0435 \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u0438 \u0432 \u0441\u0432\u044f\u0437\u0438 \u0441 \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u044e\u0449\u0438\u043c\u0441\u044f \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0435 \u0441 \u0443\u0447\u0430\u0441\u0442\u0438\u0435\u043c \u043f\u0440\u0430\u0432\u043e\u043e\u0445\u0440\u0430\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u043e\u0440\u0433\u0430\u043d\u043e\u0432.\n\nQUIRSO \u043f\u043b\u0430\u043d\u0438\u0440\u0443\u0435\u0442 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u044b\u0439 \u043e\u0442\u0447\u0435\u0442, \u043e\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u044e\u0449\u0438\u0439 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0435 \u043c\u0435\u0442\u043e\u0434\u044b, \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u043a\u0440\u0435\u043f\u043b\u0435\u043d\u0438\u044f \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0438 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u043f\u043e\u0441\u043b\u0435 \u0432\u0437\u043b\u043e\u043c\u0430, \u043d\u043e \u043f\u043e\u0437\u0436\u0435.", "creation_timestamp": "2026-08-16T00:00:49.397142Z"}, {"uuid": "bb218929-7fd9-4b67-bbba-ddc517775f4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59310", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3msyfsw5r4f2n", "content": "Critical VMware vCenter Syslog Server flaw CVE-2026-59310 is being actively exploited to deploy reverse_ssh for persistence and remote access, with 361 IPs hit across 47 countries. #VMware #Broadcom #Countries", "creation_timestamp": "2026-08-13T19:45:22.566313Z"}, {"uuid": "891edc2f-2b97-4f3e-85fb-ec5da8a85316", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59310", "type": "published-proof-of-concept", "source": "https://github.com/google/tsunami-security-scanner-plugins/blob/master/templated/templateddetector/plugins/cve/2026/VMWareVCenter_CVE_2026_59310.textproto", "content": "", "creation_timestamp": "2026-08-07T10:15:02.185761Z"}, {"uuid": "31d815dd-c74b-4bfe-8dc6-2279bf96995a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59310", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mti7up7xcp2d", "content": "Top 3 CVE for last 7 days:\nCVE-2026-59310: 36 interactions\nCVE-2026-65400: 28 interactions\nCVE-2026-68820: 15 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-65400: 11 interactions\nCVE-2026-33824: 5 interactions\nCVE-2026-6875: 5 interactions\n", "creation_timestamp": "2026-08-20T02:41:35.778534Z"}, {"uuid": "0bce2c69-dadb-4f11-9694-b7466fcd8854", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59310", "type": "exploited", "source": "https://t.me/BleepingComputer/25320", "content": "\u200aCritical VMware vCenter RCE flaw exploited for reverse SSH access\n\nA recently patched critical vulnerability (CVE-2026-59310) in VMware vCenter Syslog Server is being exploited in an active campaign to deploy a reverse SSH tool for persistence and remote access. [...]\n\nhttps://www.bleepingcomputer.com/news/security/critical-vmware-vcenter-rce-flaw-exploited-for-reverse-ssh-access/", "creation_timestamp": "2026-08-13T23:00:03.304034Z"}, {"uuid": "f023d300-bac0-4953-bdc1-41486bbfcded", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59310", "type": "seen", "source": "https://bsky.app/profile/nihonmatsu.bsky.social/post/3mtdyvkgfn22z", "content": "\u653b\u6483\u8005\u306fCVE-2026-59310\u3092\u60aa\u7528\u3057\u3066vCenter\u4e0a\u3067root\u6a29\u9650\u306e\u30b3\u30fc\u30c9\u5b9f\u884c\u3092\u884c\u3044\u3001\n\nCVE-2026-59310\n\u2193\nroot\u6a29\u9650\u3067RCE\n\u2193\ncron\u306b\u3088\u308b\u5b9f\u884c\u30fb\u6c38\u7d9a\u5316\n\u2193\nVMware\u30b5\u30fc\u30d3\u30b9\u3092\u88c5\u3063\u305f\u30b8\u30e7\u30d6\n\u2193\nJSP WebShell\n\u2193\nSSO\u7ba1\u7406\u8005\u30a2\u30ab\u30a6\u30f3\u30c8\u4f5c\u6210\n\u2193\n\u8cc7\u683c\u60c5\u5831\u7a83\u53d6\n\u2193\nreverse_ssh\u3067C2\u78ba\u7acb\n\u2193\nESXi\u3078\u5c55\u958b\n\u2193\nBabuk\u7cfb\u30e9\u30f3\u30b5\u30e0\u30a6\u30a7\u30a2\n\u3068\u3044\u3046\u653b\u6483\u30c1\u30a7\u30fc\u30f3\u304c\u78ba\u8a8d\u3055\u308c\u3066\u3044\u307e\u3059\u3002", "creation_timestamp": "2026-08-18T10:26:18.414400Z"}, {"uuid": "fb991bfa-6da7-4ab3-b29e-f493aba638ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59310", "type": "seen", "source": "https://bsky.app/profile/nihonmatsu.bsky.social/post/3mtdyvnekdc2z", "content": "\u653b\u6483\u8005\u306fCVE-2026-59310\u3092\u60aa\u7528\u3057\u3066vCenter\u4e0a\u3067root\u6a29\u9650\u306e\u30b3\u30fc\u30c9\u5b9f\u884c\u3092\u884c\u3044\u3001\n\nCVE-2026-59310\n\u2193\nroot\u6a29\u9650\u3067RCE\n\u2193\ncron\u306b\u3088\u308b\u5b9f\u884c\u30fb\u6c38\u7d9a\u5316\n\u2193\nVMware\u30b5\u30fc\u30d3\u30b9\u3092\u88c5\u3063\u305f\u30b8\u30e7\u30d6\n\u2193\nJSP WebShell\n\u2193\nSSO\u7ba1\u7406\u8005\u30a2\u30ab\u30a6\u30f3\u30c8\u4f5c\u6210\n\u2193\n\u8cc7\u683c\u60c5\u5831\u7a83\u53d6\n\u2193\nreverse_ssh\u3067C2\u78ba\u7acb\n\u2193\nESXi\u3078\u5c55\u958b\n\u2193\nBabuk\u7cfb\u30e9\u30f3\u30b5\u30e0\u30a6\u30a7\u30a2\n\u3068\u3044\u3046\u653b\u6483\u30c1\u30a7\u30fc\u30f3\u304c\u78ba\u8a8d\u3055\u308c\u3066\u3044\u307e\u3059\u3002", "creation_timestamp": "2026-08-18T10:26:18.901314Z"}, {"uuid": "066756e4-633a-4c5e-98e8-3add83e4556e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59310", "type": "seen", "source": "https://bsky.app/profile/nihonmatsu.bsky.social/post/3mtdyvpox6s2z", "content": "\u653b\u6483\u8005\u306fCVE-2026-59310\u3092\u60aa\u7528\u3057\u3066vCenter\u4e0a\u3067root\u6a29\u9650\u306e\u30b3\u30fc\u30c9\u5b9f\u884c\u3092\u884c\u3044\u3001\n\nCVE-2026-59310\n\u2193\nroot\u6a29\u9650\u3067RCE\n\u2193\ncron\u306b\u3088\u308b\u5b9f\u884c\u30fb\u6c38\u7d9a\u5316\n\u2193\nVMware\u30b5\u30fc\u30d3\u30b9\u3092\u88c5\u3063\u305f\u30b8\u30e7\u30d6\n\u2193\nJSP WebShell\n\u2193\nSSO\u7ba1\u7406\u8005\u30a2\u30ab\u30a6\u30f3\u30c8\u4f5c\u6210\n\u2193\n\u8cc7\u683c\u60c5\u5831\u7a83\u53d6\n\u2193\nreverse_ssh\u3067C2\u78ba\u7acb\n\u2193\nESXi\u3078\u5c55\u958b\n\u2193\nBabuk\u7cfb\u30e9\u30f3\u30b5\u30e0\u30a6\u30a7\u30a2\n\u3068\u3044\u3046\u653b\u6483\u30c1\u30a7\u30fc\u30f3\u304c\u78ba\u8a8d\u3055\u308c\u3066\u3044\u307e\u3059\u3002", "creation_timestamp": "2026-08-18T10:26:19.365311Z"}, {"uuid": "2fc9fec8-1b15-4b01-8f6c-b0155e0f5742", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59310", "type": "exploited", "source": "https://t.me/BleepingComputer/25320", "content": "\u200aCritical VMware vCenter RCE flaw exploited for reverse SSH access\n\nA recently patched critical vulnerability (CVE-2026-59310) in VMware vCenter Syslog Server is being exploited in an active campaign to deploy a reverse SSH tool for persistence and remote access. [...]\n\nhttps://www.bleepingcomputer.com/news/security/critical-vmware-vcenter-rce-flaw-exploited-for-reverse-ssh-access/", "creation_timestamp": "2026-08-14T00:00:07.554328Z"}, {"uuid": "211fdb9e-fe68-43cd-8d89-d0e1474595d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59310", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mt667u2kn52i", "content": "Top 3 CVE for last 7 days:\nCVE-2026-68820: 39 interactions\nCVE-2026-59310: 36 interactions\nCVE-2026-20349: 14 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-14484: 3 interactions\nCVE-2026-19900: 3 interactions\nCVE-2026-65400: 3 interactions\n", "creation_timestamp": "2026-08-16T02:45:24.906647Z"}, {"uuid": "e21e0f51-4920-4785-9f45-90d764428957", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59310", "type": "seen", "source": "https://bsky.app/profile/nihonmatsu.bsky.social/post/3mte3majfj22z", "content": "\u3010\u5bfe\u7b56\u3011Broadcom\u306fVMSA-2026-0006.1\u3067\u4fee\u6b63\u7248\u3092\u516c\u958b\u3057\u3066\u3044\u307e\u3059\u3002\nCVE-2026-59310\uff1avCenter Syslog Server\u306eDirectory Traversal \u2192 \u4efb\u610f\u30b3\u30fc\u30c9\u5b9f\u884c\nCVE-2026-59309\uff1aVMware Directory Service\u306e\u8a8d\u8a3c\u56de\u907f\n\u3044\u305a\u308c\u3082Critical / CVSS 9.8\u3067\u3001Broadcom\u306f\u300c\u56de\u907f\u7b56\u306a\u3057\u300d\u3068\u3057\u3066\u3044\u307e\u3059\u3002\n\n\u4e3b\u306a\u4fee\u6b63\u7248\uff1a\n\u30fbvCenter 9.1.x \u2192 9.1.0.0300\n\u30fbvCenter 9.0.x \u2192 9.0.2.0100\n\u30fbvCenter 8.0 \u2192 8.0 U3k / 8.0 U2f", "creation_timestamp": "2026-08-18T11:14:38.676682Z"}, {"uuid": "9e59f1c3-c24d-4c0e-951a-9474e11b9e18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59310", "type": "seen", "source": "https://bsky.app/profile/nihonmatsu.bsky.social/post/3mte3m7vtjs2z", "content": "\u3010\u5bfe\u7b56\u3011Broadcom\u306fVMSA-2026-0006.1\u3067\u4fee\u6b63\u7248\u3092\u516c\u958b\u3057\u3066\u3044\u307e\u3059\u3002\nCVE-2026-59310\uff1avCenter Syslog Server\u306eDirectory Traversal \u2192 \u4efb\u610f\u30b3\u30fc\u30c9\u5b9f\u884c\nCVE-2026-59309\uff1aVMware Directory Service\u306e\u8a8d\u8a3c\u56de\u907f\n\u3044\u305a\u308c\u3082Critical / CVSS 9.8\u3067\u3001Broadcom\u306f\u300c\u56de\u907f\u7b56\u306a\u3057\u300d\u3068\u3057\u3066\u3044\u307e\u3059\u3002\n\n\u4e3b\u306a\u4fee\u6b63\u7248\uff1a\n\u30fbvCenter 9.1.x \u2192 9.1.0.0300\n\u30fbvCenter 9.0.x \u2192 9.0.2.0100\n\u30fbvCenter 8.0 \u2192 8.0 U3k / 8.0 U2f", "creation_timestamp": "2026-08-18T11:14:38.130854Z"}, {"uuid": "d2c05496-6b30-41ab-9479-da03740489f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59310", "type": "seen", "source": "https://bsky.app/profile/sec-news-bot.bsky.social/post/3mt6chihdpm25", "content": "VMware vCenter \u306e\u91cd\u5927\u8106\u5f31\u6027 CVE-2026-59310 \u304c\u60aa\u7528\u3055\u308c\u308b\n\n\u4eca\u6708\u521d\u65ec\u304b\u3089 CVE-2026-59310 \u306b\u5bfe\u3059\u308b\u653b\u6483\u304c\u78ba\u8a8d\u3055\u308c\u3066\u304a\u308a\u3001\u30d1\u30c3\u30c1\u9069\u7528\u3060\u3051\u3067\u306f\u5b8c\u5168\u306a\u5bfe\u7b56\u306b\u306a\u3089\u306a\u3044\u53ef\u80fd\u6027\u304c\u3042\u308a\u307e\u3059\u3002VMware vCenter \u30e6\u30fc\u30b6\u30fc\u306f\u7dca\u6025\u306e\u5bfe\u5fdc\u304c\u5fc5\u8981\u3067\u3059\u3002\n\n#CVE #\u8106\u5f31\u6027 #\u60c5\u5831\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3", "creation_timestamp": "2026-08-16T04:01:16.274888Z"}, {"uuid": "5c29e51b-0319-460b-b185-9aed22ec6464", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59310", "type": "seen", "source": "https://bsky.app/profile/kotosecurity.bsky.social/post/3mt6cnwq7fe2c", "content": "\ud83d\udee1\ufe0f VMWARE: vCenter Syslog Server CVE-2026-59310 \u2014 CVSS 9.8 directory traversal \u2192 unauth RCE. Network access to vCenter syslog port = full compromise. Broadcom advisory: restrict syslog access, monitor for patches. Src: Ermer & Suter PLLC", "creation_timestamp": "2026-08-16T04:04:52.390105Z"}, {"uuid": "c1c5dd63-3d36-47a1-8201-bd7a7e2aa241", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59310", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3msyzzdk5ba2x", "content": "\ud83e\udd16 CVE-2026-59310 (CVSS 9.8): critical RCE in VMware vCenter Syslog Server exploited in the wild. Reverse SSH tool deployed for persistence; 360+ victim IPs reported.\nhttps://www.bleepingcomputer.com/news/security/critical-vmware-vcenter-rce-flaw-exploited-for-reverse-ssh-access/", "creation_timestamp": "2026-08-14T01:46:52.731767Z"}, {"uuid": "3b1f7bf5-5d1a-48a2-90d5-1b065577eb76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59310", "type": "seen", "source": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3mte65ldqog2n", "content": "\ud83d\udce2 Exploitation active de CVE-2026-59310 : 361 victimes dans 47 pays via VMware vCenter\n\nCet article documente une campagne d'exploitation active d\u00e9couverte lors d'un engagement de r\u00e9ponse \u00e0 incident. La source est le\u2026\n\n\ud83d\udfe2 v\u00e9rification factuelle haute\n#VMwareVCenter #ExploitationActive #Cyberveille", "creation_timestamp": "2026-08-18T12:00:07.893381Z"}, {"uuid": "10fc4643-5faa-46c8-a8e2-04561091c69d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59310", "type": "seen", "source": "https://bsky.app/profile/cybercynical.bsky.social/post/3mte6ofhiqs2j", "content": "VMware vCenter CVE-2026-59310 \u906d\u5168\u7403\u5229\u7528\n\nQUIRSO \u53d1\u73b0\u8be5\u6f0f\u6d1e\u5728\u62ab\u9732\u540e 5 \u5929\u4fbf\u51fa\u73b0\u5229\u7528\u6d3b\u52a8\uff0c\u53d1\u73b0 47 \u4e2a\u56fd\u5bb6/\u5730\u533a\u7684 361 \u4e2a\u53d7\u5bb3 IP \u5730\u5740\u3002\n\n\u653b\u51fb\u8005\u5229\u7528\u6f0f\u6d1e\u83b7\u53d6 vCenter \u4ee3\u7801\u6267\u884c\u80fd\u529b\uff0c\u5e76\u5efa\u7acb\u6301\u4e45\u5316\u3001\u83b7\u53d6\u51ed\u636e\u3001\u8fdb\u884c vSphere \u63a2\u6d4b\u53ca\u90e8\u7f72 Reverse SSH\uff0c\u6700\u7ec8\u5165\u4fb5 ESXi \u4e3b\u673a\u5e76\u90e8\u7f72 Babuk \u884d\u751f\u52d2\u7d22\u8f6f\u4ef6\u3002\n\nQUIRSO \u4ee5\u4e2d\u7b49\u7f6e\u4fe1\u5ea6\u8bc4\u4f30\u8be5\u6d3b\u52a8\u4e0e\u7591\u4f3c\u5177\u6709\u4e2d\u56fd\u5173\u8054\uff08Chinese-nexus\uff09\u7684\u5a01\u80c1\u884c\u4e3a\u8005\u6709\u5173\uff0c\u4f46\u5c1a\u65e0\u8db3\u591f\u8bc1\u636e\u5c06\u5176\u5f52\u56e0\u4e8e APT \u7ec4\u7ec7\u6216\u4e2d\u56fd\u653f\u5e9c\u3002\n\nmedium.com/@quirso_de/g...", "creation_timestamp": "2026-08-18T12:09:41.655095Z"}, {"uuid": "d9babded-f894-4b6f-87e7-fc5f7f11fb97", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59310", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mszauhvlll22", "content": "Top 3 CVE for last 7 days:\nCVE-2026-68820: 35 interactions\nCVE-2026-64564: 31 interactions\nCVE-2026-64638: 19 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-59310: 11 interactions\nCVE-2026-20349: 10 interactions\nCVE-2026-68820: 9 interactions\n", "creation_timestamp": "2026-08-14T03:49:25.803507Z"}, {"uuid": "a0f477e3-ec5a-4288-b515-2d278f41daef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59310", "type": "seen", "source": "Telegram/e3CgSdeoLuvzVAvy_SPtqPYT4XhVR7XxObtYTXenw7wOdA", "content": "", "creation_timestamp": "2026-08-14T04:00:03.656077Z"}, {"uuid": "4299ee28-7fff-421b-9e34-e17a13cbf100", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59310", "type": "seen", "source": "https://t.me/GithubRedTeam/98429", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-59310\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a HORKimhab\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-17 07:52:35\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-59310\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-22T19:00:08.087951Z"}, {"uuid": "4fb135e7-555e-47c2-b7dd-3796c27f6c92", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59310", "type": "seen", "source": "https://t.me/GithubRedTeam/98452", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-59310\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a BiuTrap\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-17 10:18:20\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-59310 PoC\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-22T19:00:07.564116Z"}, {"uuid": "b27bf3db-ee5c-4f2d-8bad-960b6c79f950", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59310", "type": "exploited", "source": "https://t.me/pphm_HackerNews/2598", "content": "\ud83d\udd34 Attackers Exploit VMware vCenter Vulnerability to Gain Persistent Remote Access\n\nThreat actors have begun to actively exploit a recently patched critical security flaw in Broadcom VMware vCenter, according to new findings from QUIRSO.\n\nThe vulnerability in question is CVE-2026-59310 (CVSS score: 9.8), a directory-traversal vulnerability in the VMware vCenter server that a malicious actor with network access can exploit to execute arbitrary code. Patches for the flaw were released by Broadcom late last month.\n\nThe German cybersecurity company said it discovered the activity following an incident response engagement. The attack chain is said to have exhibited path traversal activity consistent with the flaw, followed by the deployment of a malicious cron job to establish persistence on the host using reverse_ssh, an open-source tool used for setting up SSH connections to threat actor-controlled infrastructure.", "creation_timestamp": "2026-08-23T00:00:47.975316Z"}, {"uuid": "611fe236-dfde-4353-a339-88a401016f53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59310", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/98452", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-59310\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a BiuTrap\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-17 10:18:20\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-59310 PoC\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-23T00:00:07.141656Z"}, {"uuid": "e4b06672-a4a9-4550-8c53-0774741eb12d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59310", "type": "seen", "source": "https://t.me/GithubRedTeam/98429", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-59310\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a HORKimhab\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-17 07:52:35\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-59310\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-23T00:00:32.728630Z"}, {"uuid": "24c1a23c-97be-4d7f-8cf2-24928d370118", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59310", "type": "exploited", "source": "https://t.me/sec_post/1327", "content": "\ud83d\udcbb \u041d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u0430\u044f APT \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0442 \u043d\u043e\u0432\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 VMware: \u0420\u043e\u0441\u0441\u0438\u044f \u0432 \u0437\u043e\u043d\u0435 \u0440\u0438\u0441\u043a\u0430 \u2014 \u0443 \u0440\u0435\u0448\u0435\u043d\u0438\u044f 39% \u0434\u043e\u043b\u0438 \u0440\u044b\u043d\u043a\u0430 \n\n\ud83d\udea8 CVE-2026-59310 (CVSS 9.8) \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0447\u0435\u0440\u0435\u0437 \u043e\u0431\u0445\u043e\u0434 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u043e\u0432 \u0432 Syslog-\u0441\u0435\u0440\u0432\u0435\u0440\u0435. \u0410\u0442\u0430\u043a\u0438 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442 \u043e\u0434\u0438\u043d APT-\u0430\u043a\u0442\u043e\u0440, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0439 reverse_ssh \u0434\u043b\u044f \u0437\u0430\u043a\u0440\u0435\u043f\u043b\u0435\u043d\u0438\u044f \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u2014 \u0434\u0430\u0436\u0435 \u043f\u043e\u0441\u043b\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u043f\u0430\u0442\u0447\u0430 \u0434\u043e\u0441\u0442\u0443\u043f \u043c\u043e\u0436\u0435\u0442 \u0441\u043e\u0445\u0440\u0430\u043d\u0438\u0442\u044c\u0441\u044f.\n\n\u0414\u043b\u044f \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439 \u0440\u0438\u0441\u043a \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u0432\u044b\u0441\u043e\u043a: VMware \u0437\u0430\u043d\u0438\u043c\u0430\u0435\u0442 \u043e\u043a\u043e\u043b\u043e 39% \u0440\u044b\u043d\u043a\u0430 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0432 \u0420\u0424. \u0414\u043e\u0441\u0442\u0443\u043f \u043a vCenter \u0438\u0437 \u0432\u043d\u0435\u0448\u043d\u0438\u0445 \u0441\u0435\u0433\u043c\u0435\u043d\u0442\u043e\u0432 \u043a\u0440\u0430\u0442\u043d\u043e \u0443\u0432\u0435\u043b\u0438\u0447\u0438\u0432\u0430\u0435\u0442 \u0443\u0433\u0440\u043e\u0437\u0443, \u0430 \u0441\u043a\u043e\u0440\u043e\u0441\u0442\u044c \u043f\u043e\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043f\u043e\u0441\u043b\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u00ab\u0441\u043e\u043a\u0440\u0430\u0449\u0430\u0435\u0442 \u043e\u043a\u043d\u043e \u043c\u0435\u0436\u0434\u0443 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0435\u0439 CVE \u0438 \u0430\u0442\u0430\u043a\u043e\u0439 \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0434\u043e \u043c\u0438\u043d\u0438\u043c\u0443\u043c\u0430\u00bb.\n\n\u041f\u043e\u0434\u0440\u043e\u0431\u043d\u0435\u0435 \u2014 \u0432 \u043c\u0430\u0442\u0435\u0440\u0438\u0430\u043b\u0435 SecPost\ud83d\ude0d\n\n\u2014 \n\u041f\u043e\u0434\u043f\u0438\u0441\u0430\u0442\u044c\u0441\u044f \u043d\u0430 SecPost \u0432 MAX", "creation_timestamp": "2026-08-27T00:00:10.561540Z"}, {"uuid": "4945ce46-2683-4bed-972f-88ae01ae4a7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59310", "type": "seen", "source": "https://t.me/sec_post/1327", "content": "\ud83d\udcbb \u041d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u0430\u044f APT \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0442 \u043d\u043e\u0432\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 VMware: \u0420\u043e\u0441\u0441\u0438\u044f \u0432 \u0437\u043e\u043d\u0435 \u0440\u0438\u0441\u043a\u0430 \u2014 \u0443 \u0440\u0435\u0448\u0435\u043d\u0438\u044f 39% \u0434\u043e\u043b\u0438 \u0440\u044b\u043d\u043a\u0430 \n\n\ud83d\udea8 CVE-2026-59310 (CVSS 9.8) \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0447\u0435\u0440\u0435\u0437 \u043e\u0431\u0445\u043e\u0434 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u043e\u0432 \u0432 Syslog-\u0441\u0435\u0440\u0432\u0435\u0440\u0435. \u0410\u0442\u0430\u043a\u0438 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442 \u043e\u0434\u0438\u043d APT-\u0430\u043a\u0442\u043e\u0440, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0439 reverse_ssh \u0434\u043b\u044f \u0437\u0430\u043a\u0440\u0435\u043f\u043b\u0435\u043d\u0438\u044f \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u2014 \u0434\u0430\u0436\u0435 \u043f\u043e\u0441\u043b\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u043f\u0430\u0442\u0447\u0430 \u0434\u043e\u0441\u0442\u0443\u043f \u043c\u043e\u0436\u0435\u0442 \u0441\u043e\u0445\u0440\u0430\u043d\u0438\u0442\u044c\u0441\u044f.\n\n\u0414\u043b\u044f \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439 \u0440\u0438\u0441\u043a \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u0432\u044b\u0441\u043e\u043a: VMware \u0437\u0430\u043d\u0438\u043c\u0430\u0435\u0442 \u043e\u043a\u043e\u043b\u043e 39% \u0440\u044b\u043d\u043a\u0430 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0432 \u0420\u0424. \u0414\u043e\u0441\u0442\u0443\u043f \u043a vCenter \u0438\u0437 \u0432\u043d\u0435\u0448\u043d\u0438\u0445 \u0441\u0435\u0433\u043c\u0435\u043d\u0442\u043e\u0432 \u043a\u0440\u0430\u0442\u043d\u043e \u0443\u0432\u0435\u043b\u0438\u0447\u0438\u0432\u0430\u0435\u0442 \u0443\u0433\u0440\u043e\u0437\u0443, \u0430 \u0441\u043a\u043e\u0440\u043e\u0441\u0442\u044c \u043f\u043e\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043f\u043e\u0441\u043b\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u00ab\u0441\u043e\u043a\u0440\u0430\u0449\u0430\u0435\u0442 \u043e\u043a\u043d\u043e \u043c\u0435\u0436\u0434\u0443 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0435\u0439 CVE \u0438 \u0430\u0442\u0430\u043a\u043e\u0439 \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0434\u043e \u043c\u0438\u043d\u0438\u043c\u0443\u043c\u0430\u00bb.\n\n\u041f\u043e\u0434\u0440\u043e\u0431\u043d\u0435\u0435 \u2014 \u0432 \u043c\u0430\u0442\u0435\u0440\u0438\u0430\u043b\u0435 SecPost\ud83d\ude0d\n\n\u2014 \n\u041f\u043e\u0434\u043f\u0438\u0441\u0430\u0442\u044c\u0441\u044f \u043d\u0430 SecPost \u0432 MAX", "creation_timestamp": "2026-08-26T05:00:03.997659Z"}, {"uuid": "9259a35e-fc0f-4ef6-b5f2-fca0db39e037", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59310", "type": "seen", "source": "https://t.me/thehackernews/9839", "content": "\ud83d\udea8 Four Critical Flaws Under Active Exploitation:\n\n\u2022 macOS CVE-2026-65400\n\u2022 SharePoint CVE-2026-55040\n\u2022 vCenter CVE-2026-59310\n\u2022 Microsoft IKE CVE-2026-33824\n\nReported attacks include Monero mining, persistent access, and Babuk-derived ransomware.\n\nRead: https://thehackernews.com/2026/08/critical-macos-sharepoint-vcenter-and.html", "creation_timestamp": "2026-08-23T20:00:06.523868Z"}, {"uuid": "deb6d657-e1e7-45c8-90d0-1cfff4fa924a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59310", "type": "seen", "source": "https://t.me/thehackernews/9815", "content": "\ud83d\udea8 VMware vCenter exploitation leads to Babuk-derived #ransomware on ESXi.\n\nA suspected China-nexus actor exploited CVE-2026-59310 just five days after disclosure, compromising an estimated 361 IPs across 47 countries.\n\nRead: https://thehackernews.com/2026/08/suspected-china-nexus-actor-exploits.html", "creation_timestamp": "2026-08-23T20:00:06.955421Z"}, {"uuid": "0e7065eb-f3d4-4f63-9f7e-7f3f0de4d8d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59310", "type": "exploited", "source": "https://t.me/thehackernews/9815", "content": "\ud83d\udea8 VMware vCenter exploitation leads to Babuk-derived #ransomware on ESXi.\n\nA suspected China-nexus actor exploited CVE-2026-59310 just five days after disclosure, compromising an estimated 361 IPs across 47 countries.\n\nRead: https://thehackernews.com/2026/08/suspected-china-nexus-actor-exploits.html", "creation_timestamp": "2026-08-24T00:00:04.390098Z"}, {"uuid": "fa5af8bf-ff67-43ec-b27f-18458f8feba0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59310", "type": "exploited", "source": "https://t.me/thehackernews/9839", "content": "\ud83d\udea8 Four Critical Flaws Under Active Exploitation:\n\n\u2022 macOS CVE-2026-65400\n\u2022 SharePoint CVE-2026-55040\n\u2022 vCenter CVE-2026-59310\n\u2022 Microsoft IKE CVE-2026-33824\n\nReported attacks include Monero mining, persistent access, and Babuk-derived ransomware.\n\nRead: https://thehackernews.com/2026/08/critical-macos-sharepoint-vcenter-and.html", "creation_timestamp": "2026-08-24T00:00:04.728645Z"}, {"uuid": "4becc3ea-0309-4d7b-af05-f1288d651e85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59310", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/98429", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-59310\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a HORKimhab\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-17 07:52:35\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-59310\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-24T00:00:11.062833Z"}, {"uuid": "5a4a7a7c-2d46-4765-9658-c0d2e1cd39b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59310", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mrrpp2orks23", "content": "Broadcom released updates to fix a critical VMware authentication bypass (CVE-2026-59309). A directory traversal flaw (CVE-2026-59310) was also patched.\n\n#VMware #CyberSecurity #CVE202659309 #InfoSec", "creation_timestamp": "2026-07-29T10:28:20.965564Z"}, {"uuid": "89dfea13-27da-4182-8b52-f82ac22b03e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59310", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mrrxjfggfg2z", "content": "Broadcom patched a critical VMware vCenter vulnerability. CVE-2026-59309 and CVE-2026-59310 both score 9.8 CVSS and allow auth bypass or code execution.\n\n#VMware #vCenter #CVE202659309 #CVE202659310 #ESXi #InfoSec", "creation_timestamp": "2026-07-29T12:48:21.191062Z"}, {"uuid": "6985d9c1-f343-400c-9e7b-14434bc2975f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59310", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0269", "content": "VMware heeft kwetsbaarheden verholpen in VMware vCenter en VMware ESX producten. VMware vCenter bevat een kritieke authentication-bypass kwetsbaarheid in de Directory Service met kenmerk CVE-2026-59309. Deze kwetsbaarheid stelt een kwaadwillende met netwerktoegang tot VMware vCenter in staat deze kwetsbaarheid te misbruiken om de authenticatie te omzeilen en ongeautoriseerde toegang tot het systeem te verkrijgen. \n\nDaarnaast bevat VMware vCenter ook een kritieke directory-traversal kwetsbaarheid in de Syslog server met kenmerk CVE-2026-59310. Deze kwetsbaarheid kan een kwaadwillende in staat stellen willekeurige code uit te voeren, waardoor mogelijk bestands- en directorypaden kunnen worden gemanipuleerd en toegang kan worden verkregen tot bestanden buiten de bedoelde Syslog-directory.\n\nVMware ESXi bevat een kritieke out-of-bounds write\u00a0kwetsbaarheid in de VMXNET3 virtuele netwerkadapter met kenmerk CVE-2026-47876. Deze kwetsbaarheid stelt een kwaadwillende met lokale beheerdersrechten op een virtuele machine met een VMXNET3 virtuele netwerkadapter in staat, code uit te voeren op de onderliggende host. Dit maakt het voor een kwaadwillende mogelijk, data buiten de bedoelde geheugenlimieten kan schrijven, wat kan leiden tot geheugenbeschadiging en onvoorspelbaar gedrag of compromittering van het virtuele systeem. Virtuele netwerkadapters die geen gebruikmaken van VMXNET3 zijn niet kwetsbaar. \n\nIn VMware ESX, Workstation en Fusion bevatten ook een out-of-bounds read kwetsbaarheid met kenmerk CVE-2026-41703. Misbruik van deze  kwetsbaarheid die kan resulteren in onbedoelde toegang tot geheugen buiten de toegewezen buffer, wat kan leiden tot informatielekken of systeeminstabiliteit binnen virtuele omgevingen. Daarnaast bevat VMware ESX een kwetsbaarheid met kenmerk CVE-2026-41709 door onvoldoende logging. Een kwaadwillende beheerder kan deze kwetsbaarheid misbruiken om bepaalde acties uit te voeren die niet in de logbestanden worden geregistreerd.\n\nHet is goed gebruik om toegang tot ESXi en vCenter uitsluitend beschikbaar te stellen vanuit een gescheiden beheeromgeving waarin alleen geautoriseerde beheerders toegang hebben. Deze beheerinterfaces dienen niet rechtstreeks vanaf internet of externe netwerken toegankelijk te zijn.", "creation_timestamp": "2026-07-29T13:00:55.195394Z"}, {"uuid": "fcd894bb-cd99-451c-8fa2-9567f35bcbd7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-59310", "type": "seen", "source": "https://www.ncsc.nl/alerts/kritieke-kwetsbaarheden-in-vmware-vcenter-en-esx-producten-update-onmiddellijk", "content": "", "creation_timestamp": "2026-07-29T16:15:19.114608Z"}, {"uuid": "e0b2c714-d8fc-44b3-8885-10acc8b899f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-59310", "type": "seen", "source": "https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuudet/haavoittuvuus-2026-20", "content": "", "creation_timestamp": "2026-07-29T16:45:07.919687Z"}, {"uuid": "672c9efd-903e-4df8-95e6-88a064b6d724", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59310", "type": "seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3mrsfhckval2r", "content": "Broadcom patches critical VMware flaws, including a VM escape in ESXi (CVE-2026-47876) and unauthenticated RCE in vCenter (CVE-2026-59309, CVE-2026-59310). CVSS scores up to 9.8. Immediate patching is crucial. #VMware #CyberSecurity #PatchTuesday\n\n\ud83c\udf10 cyber[.]netsecops[.]io", "creation_timestamp": "2026-07-29T16:57:43.558499Z"}, {"uuid": "cf257194-4f23-4039-a064-ba0b4bd1bccf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59310", "type": "seen", "source": "https://t.me/true_secator/8455", "content": "Broadcom \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u043d\u043e\u0432\u043e\u0435 \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u0435 \u043f\u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0438\u043d\u0444\u043e\u0440\u043c\u0438\u0440\u0443\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0440\u0435\u0448\u0435\u043d\u0438\u0439 VMware \u043e \u043d\u0430\u043b\u0438\u0447\u0438\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u0434\u043b\u044f \u0440\u044f\u0434\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0438\u0445 ESXi, vCenter, Workstation \u0438 Fusion.\n\n\u0422\u0440\u0435\u043c \u0438\u0437 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043f\u0440\u0438\u0441\u0432\u043e\u0435\u043d \u0440\u0435\u0439\u0442\u0438\u043d\u0433 \u00ab\u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439\u00bb. \u041e\u0434\u043d\u0430 \u0438\u0437 \u043d\u0438\u0445 - CVE-2026-47876, \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u043f\u0438\u0441\u0438 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u044b \u0434\u043e\u043f\u0443\u0441\u0442\u0438\u043c\u043e\u0433\u043e \u0434\u0438\u0430\u043f\u0430\u0437\u043e\u043d\u0430 \u0432 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u043c \u0441\u0435\u0442\u0435\u0432\u043e\u043c \u0430\u0434\u0430\u043f\u0442\u0435\u0440\u0435 VMXNET3 \u0432 ESXi.\u00a0\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a, \u043e\u0431\u043b\u0430\u0434\u0430\u044e\u0449\u0438\u0439 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u043d\u0430 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0439 \u043c\u0430\u0448\u0438\u043d\u0435 \u0441 \u044d\u0442\u0438\u043c \u0430\u0434\u0430\u043f\u0442\u0435\u0440\u043e\u043c, \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0435\u0433\u043e \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043d\u0430 \u0445\u043e\u0441\u0442\u0435. VMware \u043e\u043f\u0438\u0441\u0430\u043b\u0430 CVE-2026-47876 \u043a\u0430\u043a \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0432\u044b\u0445\u043e\u0434\u0430 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u044b \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0439 \u043c\u0430\u0448\u0438\u043d\u044b.\n\n\u0412\u0442\u043e\u0440\u0430\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f CVE-2026-59309 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u043e\u0431\u0445\u043e\u0434 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 vCenter, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0446\u0435\u043b\u0435\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435.\n\nCVE-2026-59310 \u0442\u0430\u043a\u0436\u0435 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e vCenter, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0441 \u0441\u0435\u0442\u0435\u0432\u044b\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434.\u00a0\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, VMware ESXi, Workstation \u0438 Fusion \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u044b CVE-2026-41703, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0435\u0439 \u0441\u043e\u0431\u043e\u0439 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0443\u044e \u0443\u0433\u0440\u043e\u0437\u0443, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0443\u044e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u043d\u0430 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u0435 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u043c\u0430\u0448\u0438\u043d \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u0438\u043b\u0438, \u0447\u0442\u043e \u0431\u043e\u043b\u0435\u0435 \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e, \u0432\u044b\u0437\u0432\u0430\u0442\u044c DoS.\n\n\u041f\u043e\u0441\u043b\u0435\u0434\u043d\u044f\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, CVE-2026-41709, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u043d\u0438\u0437\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 \u0432 ESXi, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0435 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f, \u043d\u0435 \u0431\u0443\u0434\u0443\u0447\u0438 \u0437\u0430\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435.\u00a0\n\nBroadcom \u043d\u0435 \u0440\u0430\u0441\u043f\u043e\u043b\u0430\u0433\u0430\u0435\u0442 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0435\u0439 \u043e\u0431 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445, \u043d\u043e \u0432\u0430\u0436\u043d\u043e, \u0447\u0442\u043e\u0431\u044b \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u0438\u043b\u0438 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0447\u0430\u0441\u0442\u043e\u00a0\u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u00a0\u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 VMware.\n\n\u0412 \u0434\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a \u0441\u0432\u043e\u0435\u043c\u0443 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044e, \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0439 \u0440\u0430\u0437\u0434\u0435\u043b \u0432 FAQ, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u0432\u043b\u0438\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0438 \u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043d\u0438\u044f \u043a \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044e.", "creation_timestamp": "2026-07-29T17:00:04.341729Z"}, {"uuid": "58212a5c-e996-489a-b1e5-882cf0a7a36e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59310", "type": "seen", "source": "https://t.me/true_secator/8455", "content": "Broadcom \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u043d\u043e\u0432\u043e\u0435 \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u0435 \u043f\u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0438\u043d\u0444\u043e\u0440\u043c\u0438\u0440\u0443\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0440\u0435\u0448\u0435\u043d\u0438\u0439 VMware \u043e \u043d\u0430\u043b\u0438\u0447\u0438\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u0434\u043b\u044f \u0440\u044f\u0434\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0438\u0445 ESXi, vCenter, Workstation \u0438 Fusion.\n\n\u0422\u0440\u0435\u043c \u0438\u0437 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043f\u0440\u0438\u0441\u0432\u043e\u0435\u043d \u0440\u0435\u0439\u0442\u0438\u043d\u0433 \u00ab\u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439\u00bb. \u041e\u0434\u043d\u0430 \u0438\u0437 \u043d\u0438\u0445 - CVE-2026-47876, \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u043f\u0438\u0441\u0438 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u044b \u0434\u043e\u043f\u0443\u0441\u0442\u0438\u043c\u043e\u0433\u043e \u0434\u0438\u0430\u043f\u0430\u0437\u043e\u043d\u0430 \u0432 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u043c \u0441\u0435\u0442\u0435\u0432\u043e\u043c \u0430\u0434\u0430\u043f\u0442\u0435\u0440\u0435 VMXNET3 \u0432 ESXi.\u00a0\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a, \u043e\u0431\u043b\u0430\u0434\u0430\u044e\u0449\u0438\u0439 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u043d\u0430 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0439 \u043c\u0430\u0448\u0438\u043d\u0435 \u0441 \u044d\u0442\u0438\u043c \u0430\u0434\u0430\u043f\u0442\u0435\u0440\u043e\u043c, \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0435\u0433\u043e \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043d\u0430 \u0445\u043e\u0441\u0442\u0435. VMware \u043e\u043f\u0438\u0441\u0430\u043b\u0430 CVE-2026-47876 \u043a\u0430\u043a \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0432\u044b\u0445\u043e\u0434\u0430 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u044b \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0439 \u043c\u0430\u0448\u0438\u043d\u044b.\n\n\u0412\u0442\u043e\u0440\u0430\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f CVE-2026-59309 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u043e\u0431\u0445\u043e\u0434 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 vCenter, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0446\u0435\u043b\u0435\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435.\n\nCVE-2026-59310 \u0442\u0430\u043a\u0436\u0435 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e vCenter, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0441 \u0441\u0435\u0442\u0435\u0432\u044b\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434.\u00a0\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, VMware ESXi, Workstation \u0438 Fusion \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u044b CVE-2026-41703, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0435\u0439 \u0441\u043e\u0431\u043e\u0439 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0443\u044e \u0443\u0433\u0440\u043e\u0437\u0443, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0443\u044e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u043d\u0430 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u0435 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u043c\u0430\u0448\u0438\u043d \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u0438\u043b\u0438, \u0447\u0442\u043e \u0431\u043e\u043b\u0435\u0435 \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e, \u0432\u044b\u0437\u0432\u0430\u0442\u044c DoS.\n\n\u041f\u043e\u0441\u043b\u0435\u0434\u043d\u044f\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, CVE-2026-41709, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u043d\u0438\u0437\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 \u0432 ESXi, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0435 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f, \u043d\u0435 \u0431\u0443\u0434\u0443\u0447\u0438 \u0437\u0430\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435.\u00a0\n\nBroadcom \u043d\u0435 \u0440\u0430\u0441\u043f\u043e\u043b\u0430\u0433\u0430\u0435\u0442 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0435\u0439 \u043e\u0431 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445, \u043d\u043e \u0432\u0430\u0436\u043d\u043e, \u0447\u0442\u043e\u0431\u044b \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u0438\u043b\u0438 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0447\u0430\u0441\u0442\u043e\u00a0\u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u00a0\u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 VMware.\n\n\u0412 \u0434\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a \u0441\u0432\u043e\u0435\u043c\u0443 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044e, \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0439 \u0440\u0430\u0437\u0434\u0435\u043b \u0432 FAQ, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u0432\u043b\u0438\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0438 \u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043d\u0438\u044f \u043a \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044e.", "creation_timestamp": "2026-07-30T00:00:27.127700Z"}]}