Vulnerability-Lookup

CVE-2026-59310 (GCVE-0-2026-59310)

Vulnerability from cvelistv5 – Published: 2026-07-30 12:19 – Updated: 2026-07-30 15:03

Title

vCenter directory-traversal vulnerability

Summary

VMware vCenter contains a directory traversal vulnerability in the Syslog server. A malicious actor with network access to vCenter may exploit this issue to execute arbitrary code.

Severity

9.8 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: yes Technical Impact: total

CISA Coordinator (v2.0.3)

CWE

CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Assigner

vmware

References

1 reference

URL	Tags
https://support.broadcom.com/web/ecx/support-cont…

Impacted products

5 products

Vendor	Product	Version
VMware	Cloud Foundation	Affected: 9.1.x.x Affected: 9.0.x.x Affected: 5.x
VMware	vSphere Foundation	Affected: 9.1.x.x Affected: 9.0.x.x
VMware	vCenter	Affected: 9.1.x.x , < 9.1.0.0300 (custom) Affected: 9.0.x.x , < 9.0.2.0100 (custom) Affected: 8.0 , < 8.0 U3k (custom)
VMware	Telco Cloud Infrastructure	Affected: 3.0
VMware	Telco Cloud Platform	Affected: 5.1.x Affected: 5.0.x Affected: 4.x Affected: 3.0

Date Public

2026-07-29 04:30

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-59310",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-07-30T15:03:18.384404Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-07-30T15:03:36.898Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Cloud Foundation",
          "vendor": "VMware",
          "versions": [
            {
              "status": "affected",
              "version": "9.1.x.x"
            },
            {
              "status": "affected",
              "version": "9.0.x.x"
            },
            {
              "status": "affected",
              "version": "5.x"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "vSphere Foundation",
          "vendor": "VMware",
          "versions": [
            {
              "status": "affected",
              "version": "9.1.x.x"
            },
            {
              "status": "affected",
              "version": "9.0.x.x"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "vCenter",
          "vendor": "VMware",
          "versions": [
            {
              "lessThan": "9.1.0.0300",
              "status": "affected",
              "version": "9.1.x.x",
              "versionType": "custom"
            },
            {
              "lessThan": "9.0.2.0100",
              "status": "affected",
              "version": "9.0.x.x",
              "versionType": "custom"
            },
            {
              "lessThan": "8.0 U3k",
              "status": "affected",
              "version": "8.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Telco Cloud Infrastructure",
          "vendor": "VMware",
          "versions": [
            {
              "status": "affected",
              "version": "3.0"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Telco Cloud Platform",
          "vendor": "VMware",
          "versions": [
            {
              "status": "affected",
              "version": "5.1.x"
            },
            {
              "status": "affected",
              "version": "5.0.x"
            },
            {
              "status": "affected",
              "version": "4.x"
            },
            {
              "status": "affected",
              "version": "3.0"
            }
          ]
        }
      ],
      "datePublic": "2026-07-29T04:30:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "VMware vCenter contains a directory traversal vulnerability in the Syslog server.\u0026nbsp;\u003cspan\u003eA malicious actor with network access to vCenter\u0026nbsp;may exploit this issue to execute arbitrary code.\u003c/span\u003e\u003cbr\u003e\u003cbr\u003e"
            }
          ],
          "value": "VMware vCenter contains a directory traversal vulnerability in the Syslog server.\u00a0A malicious actor with network access to vCenter\u00a0may exploit this issue to execute arbitrary code."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-22",
              "description": "CWE-22 Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-07-30T12:28:20.696Z",
        "orgId": "dcf2e128-44bd-42ed-91e8-88f912c1401d",
        "shortName": "vmware"
      },
      "references": [
        {
          "url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/38017"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "vCenter directory-traversal vulnerability",
      "x_generator": {
        "engine": "Vulnogram 1.0.4"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "dcf2e128-44bd-42ed-91e8-88f912c1401d",
    "assignerShortName": "vmware",
    "cveId": "CVE-2026-59310",
    "datePublished": "2026-07-30T12:19:25.296Z",
    "dateReserved": "2026-07-04T18:13:57.026Z",
    "dateUpdated": "2026-07-30T15:03:36.898Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "nvd": "{\"cve\":{\"id\":\"CVE-2026-59310\",\"sourceIdentifier\":\"security@vmware.com\",\"published\":\"2026-07-30T13:16:53.993\",\"lastModified\":\"2026-07-30T16:17:15.183\",\"vulnStatus\":\"Awaiting Analysis\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"VMware vCenter contains a directory traversal vulnerability in the Syslog server.\u00a0A malicious actor with network access to vCenter\u00a0may exploit this issue to execute arbitrary code.\"}],\"affected\":[{\"source\":\"security@vmware.com\",\"affectedData\":[{\"vendor\":\"VMware\",\"product\":\"Cloud Foundation\",\"defaultStatus\":\"unaffected\",\"versions\":[{\"version\":\"9.1.x.x\",\"status\":\"affected\"},{\"version\":\"9.0.x.x\",\"status\":\"affected\"},{\"version\":\"5.x\",\"status\":\"affected\"}]},{\"vendor\":\"VMware\",\"product\":\"vSphere Foundation\",\"defaultStatus\":\"unaffected\",\"versions\":[{\"version\":\"9.1.x.x\",\"status\":\"affected\"},{\"version\":\"9.0.x.x\",\"status\":\"affected\"}]},{\"vendor\":\"VMware\",\"product\":\"vCenter\",\"defaultStatus\":\"unaffected\",\"versions\":[{\"version\":\"9.1.x.x\",\"lessThan\":\"9.1.0.0300\",\"versionType\":\"custom\",\"status\":\"affected\"},{\"version\":\"9.0.x.x\",\"lessThan\":\"9.0.2.0100\",\"versionType\":\"custom\",\"status\":\"affected\"},{\"version\":\"8.0\",\"lessThan\":\"8.0 U3k\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"VMware\",\"product\":\"Telco Cloud Infrastructure\",\"defaultStatus\":\"unaffected\",\"versions\":[{\"version\":\"3.0\",\"status\":\"affected\"}]},{\"vendor\":\"VMware\",\"product\":\"Telco Cloud Platform\",\"defaultStatus\":\"unaffected\",\"versions\":[{\"version\":\"5.1.x\",\"status\":\"affected\"},{\"version\":\"5.0.x\",\"status\":\"affected\"},{\"version\":\"4.x\",\"status\":\"affected\"},{\"version\":\"3.0\",\"status\":\"affected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"security@vmware.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":9.8,\"baseSeverity\":\"CRITICAL\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":5.9}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2026-07-30T15:03:18.384404Z\",\"id\":\"CVE-2026-59310\",\"options\":[{\"exploitation\":\"none\"},{\"automatable\":\"yes\"},{\"technicalImpact\":\"total\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"weaknesses\":[{\"source\":\"security@vmware.com\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-22\"}]}],\"references\":[{\"url\":\"https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/38017\",\"source\":\"security@vmware.com\"}]}}",
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2026-59310\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"yes\"}, {\"Technical Impact\": \"total\"}], \"version\": \"2.0.3\", \"timestamp\": \"2026-07-30T15:03:18.384404Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2026-07-30T15:03:32.431Z\"}}], \"cna\": {\"title\": \"vCenter directory-traversal vulnerability\", \"source\": {\"discovery\": \"UNKNOWN\"}, \"metrics\": [{\"format\": \"CVSS\", \"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 9.8, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"CRITICAL\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\", \"integrityImpact\": \"HIGH\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"HIGH\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"HIGH\"}, \"scenarios\": [{\"lang\": \"en\", \"value\": \"GENERAL\"}]}], \"affected\": [{\"vendor\": \"VMware\", \"product\": \"Cloud Foundation\", \"versions\": [{\"status\": \"affected\", \"version\": \"9.1.x.x\"}, {\"status\": \"affected\", \"version\": \"9.0.x.x\"}, {\"status\": \"affected\", \"version\": \"5.x\"}], \"defaultStatus\": \"unaffected\"}, {\"vendor\": \"VMware\", \"product\": \"vSphere Foundation\", \"versions\": [{\"status\": \"affected\", \"version\": \"9.1.x.x\"}, {\"status\": \"affected\", \"version\": \"9.0.x.x\"}], \"defaultStatus\": \"unaffected\"}, {\"vendor\": \"VMware\", \"product\": \"vCenter\", \"versions\": [{\"status\": \"affected\", \"version\": \"9.1.x.x\", \"lessThan\": \"9.1.0.0300\", \"versionType\": \"custom\"}, {\"status\": \"affected\", \"version\": \"9.0.x.x\", \"lessThan\": \"9.0.2.0100\", \"versionType\": \"custom\"}, {\"status\": \"affected\", \"version\": \"8.0\", \"lessThan\": \"8.0 U3k\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unaffected\"}, {\"vendor\": \"VMware\", \"product\": \"Telco Cloud Infrastructure\", \"versions\": [{\"status\": \"affected\", \"version\": \"3.0\"}], \"defaultStatus\": \"unaffected\"}, {\"vendor\": \"VMware\", \"product\": \"Telco Cloud Platform\", \"versions\": [{\"status\": \"affected\", \"version\": \"5.1.x\"}, {\"status\": \"affected\", \"version\": \"5.0.x\"}, {\"status\": \"affected\", \"version\": \"4.x\"}, {\"status\": \"affected\", \"version\": \"3.0\"}], \"defaultStatus\": \"unaffected\"}], \"datePublic\": \"2026-07-29T04:30:00.000Z\", \"references\": [{\"url\": \"https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/38017\"}], \"x_generator\": {\"engine\": \"Vulnogram 1.0.4\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"VMware vCenter contains a directory traversal vulnerability in the Syslog server.\\u00a0A malicious actor with network access to vCenter\\u00a0may exploit this issue to execute arbitrary code.\", \"supportingMedia\": [{\"type\": \"text/html\", \"value\": \"VMware vCenter contains a directory traversal vulnerability in the Syslog server.\u0026nbsp;\u003cspan\u003eA malicious actor with network access to vCenter\u0026nbsp;may exploit this issue to execute arbitrary code.\u003c/span\u003e\u003cbr\u003e\u003cbr\u003e\", \"base64\": false}]}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-22\", \"description\": \"CWE-22 Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)\"}]}], \"providerMetadata\": {\"orgId\": \"dcf2e128-44bd-42ed-91e8-88f912c1401d\", \"shortName\": \"vmware\", \"dateUpdated\": \"2026-07-30T12:28:20.696Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2026-59310\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-07-30T15:03:36.898Z\", \"dateReserved\": \"2026-07-04T18:13:57.026Z\", \"assignerOrgId\": \"dcf2e128-44bd-42ed-91e8-88f912c1401d\", \"datePublished\": \"2026-07-30T12:19:25.296Z\", \"assignerShortName\": \"vmware\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}

CERTFR-2026-AVI-0949

Vulnerability from certfr_avis - Published: 2026-07-30 - Updated: 2026-07-30

De multiples vulnérabilités ont été découvertes dans les produits VMware. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, un déni de service à distance et une atteinte à la confidentialité des données.

Solutions

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

Impacted products

Vendor	Product	Description
VMware	vSphere ESXi	ESX version 8.0 antérieures à ESXi80U3i-25205845
VMware	vSphere Foundation	vSphere Foundation versions 9.0.x antérieures à 9.0.2.0100-25595025
VMware	Telco Cloud Infrastructure	Telco Cloud Infrastructure versions 3.0 sans le correctif de sécurité KB449886
VMware	vCenter Server	vCenter versions 8.0 antérieures à 8.0 U3k
VMware	Cloud Foundation	Cloud Foundation versions 9.0.x antérieures à 9.0.2.0100-25595025
VMware	Workstation	Workstation versions antérieures à 26H1
VMware	Cloud Foundation	Cloud Foundation versions 9.1.x antérieures à 9.1.0.0300
VMware	Cloud Foundation	Cloud Foundation versions 5.x sans le correctif de sécurité KB88287
VMware	Telco Cloud Platform	Telco Cloud Platform versions 3.0, 4.x, 5.0.x et 5.1.x sans le correctif de sécurité KB449886
VMware	vSphere Foundation	vSphere Foundation versions 9.1.x antérieures à 9.1.0.0300
VMware	Fusion	Fusion versions antérieures à 26H1

References

Title

Publication Time

GHSA-V2GP-49GJ-2C9F

Vulnerability from github – Published: 2026-07-30 15:31 – Updated: 2026-07-30 15:31

Details

VMware vCenter contains a directory traversal vulnerability in the Syslog server. A malicious actor with network access to vCenter may exploit this issue to execute arbitrary code.

Severity

9.8 (Critical)


                  
                    CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2026-59310"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-22"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2026-07-30T13:16:53Z",
    "severity": "CRITICAL"
  },
  "details": "VMware vCenter contains a directory traversal vulnerability in the Syslog server.\u00a0A malicious actor with network access to vCenter\u00a0may exploit this issue to execute arbitrary code.",
  "id": "GHSA-v2gp-49gj-2c9f",
  "modified": "2026-07-30T15:31:50Z",
  "published": "2026-07-30T15:31:50Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-59310"
    },
    {
      "type": "WEB",
      "url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/38017"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
      "type": "CVSS_V3"
    }
  ]
}

NCSC-2026-0269

Vulnerability from csaf_ncscnl - Published: 2026-07-29 12:46 - Updated: 2026-07-29 13:29

Summary

Kwetsbaarheden verholpen in VMware producten

Notes

The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions: NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein. NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory. This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings.

Feiten: VMware heeft kwetsbaarheden verholpen in VMware vCenter en VMware ESX producten.

Interpretaties: VMware vCenter bevat een kritieke authentication-bypass kwetsbaarheid in de Directory Service met kenmerk CVE-2026-59309. Deze kwetsbaarheid stelt een kwaadwillende met netwerktoegang tot VMware vCenter in staat deze kwetsbaarheid te misbruiken om de authenticatie te omzeilen en ongeautoriseerde toegang tot het systeem te verkrijgen. Daarnaast bevat VMware vCenter ook een kritieke directory-traversal kwetsbaarheid in de Syslog server met kenmerk CVE-2026-59310. Deze kwetsbaarheid kan een kwaadwillende in staat stellen willekeurige code uit te voeren, waardoor mogelijk bestands- en directorypaden kunnen worden gemanipuleerd en toegang kan worden verkregen tot bestanden buiten de bedoelde Syslog-directory. VMware ESX bevat een kritieke out-of-bounds write kwetsbaarheid in de VMXNET3 virtuele netwerkadapter met kenmerk CVE-2026-47876. Deze kwetsbaarheid stelt een kwaadwillende met lokale beheerdersrechten op een virtuele machine met een VMXNET3 virtuele netwerkadapter in staat, code uit te voeren op de onderliggende host. Dit maakt het voor een kwaadwillende mogelijk, data buiten de bedoelde geheugenlimieten kan schrijven, wat kan leiden tot geheugenbeschadiging en onvoorspelbaar gedrag of compromittering van het virtuele systeem. Virtuele netwerkadapters die geen gebruikmaken van VMXNET3 zijn niet kwetsbaar. In VMware ESX, Workstation en Fusion bevatten ook een out-of-bounds read kwetsbaarheid met kenmerk CVE-2026-41703. Misbruik van deze kwetsbaarheid die kan resulteren in onbedoelde toegang tot geheugen buiten de toegewezen buffer, wat kan leiden tot informatielekken of systeeminstabiliteit binnen virtuele omgevingen. Daarnaast bevat VMware ESX een kwetsbaarheid met kenmerk CVE-2026-41709 door onvoldoende logging. Een kwaadwillende beheerder kan deze kwetsbaarheid misbruiken om bepaalde acties uit te voeren die niet in de logbestanden worden geregistreerd. Het is goed gebruik om toegang tot ESX en vCenter uitsluitend beschikbaar te stellen vanuit een gescheiden beheeromgeving waarin alleen geautoriseerde beheerders toegang hebben. Deze beheerinterfaces dienen niet rechtstreeks vanaf internet of externe netwerken toegankelijk te zijn.

Oplossingen: VMware heeft updates uitgebracht om de kwetsbaarheden in VMware vCenter, ESX, Workstation en Fusion te verhelpen. Zie bijgevoegde referenties voor meer informatie.

Kans: medium

Schade: high

CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

CWE-125: Out-of-bounds Read

CWE-778: Insufficient Logging

CVE-2026-59309

VMware vCenter contains an authentication bypass vulnerability within its VMware Directory Service, potentially allowing unauthorized access.

9.8 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

Known affected 4 products

Product	Identifier	Version	Remediation
vers:unknown/* VMware / ESX		vers:unknown/*
vers:unknown/* VMware / Fusion		vers:unknown/*
vers:unknown/* VMware / Workstation		vers:unknown/*
vers:unknown/* VMware / vCenter		vers:unknown/*

CVE-2026-59310

VMware vCenter's Syslog server contains a directory traversal vulnerability that could be exploited to access unauthorized files.

9.8 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

Known affected 4 products

Product	Identifier	Version	Remediation
vers:unknown/* VMware / ESX		vers:unknown/*
vers:unknown/* VMware / Fusion		vers:unknown/*
vers:unknown/* VMware / Workstation		vers:unknown/*
vers:unknown/* VMware / vCenter		vers:unknown/*

CVE-2026-47876

VMware ESX contains an out-of-bounds write vulnerability in its VMXNET3 virtual network adapter that could potentially be exploited to compromise system integrity.

9.3 (Critical)


                        
                          CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Affected products

Known affected 4 products

Product	Identifier	Version	Remediation
vers:unknown/* VMware / ESX		vers:unknown/*
vers:unknown/* VMware / Fusion		vers:unknown/*
vers:unknown/* VMware / Workstation		vers:unknown/*
vers:unknown/* VMware / vCenter		vers:unknown/*

CVE-2026-41703

VMware ESX, Workstation, and Fusion products contain a security vulnerability characterized by an out-of-bounds read, potentially impacting system stability and security.

7.6 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L

Affected products

Known affected 4 products

Product	Identifier	Version	Remediation
vers:unknown/* VMware / ESX		vers:unknown/*
vers:unknown/* VMware / Fusion		vers:unknown/*
vers:unknown/* VMware / Workstation		vers:unknown/*
vers:unknown/* VMware / vCenter		vers:unknown/*

CVE-2026-41709

VMware ESX contains a vulnerability characterized by insufficient logging, which may affect system monitoring and forensic capabilities.

2.7 (Low)


                        
                          CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N

Affected products

Known affected 4 products

Product	Identifier	Version	Remediation
vers:unknown/* VMware / ESX		vers:unknown/*
vers:unknown/* VMware / Fusion		vers:unknown/*
vers:unknown/* VMware / Workstation		vers:unknown/*
vers:unknown/* VMware / vCenter		vers:unknown/*

References

7 references

URL	Category
https://brcm.tech/vmsa-2026-0006	external
https://support.broadcom.com/web/ecx/support-cont…	external
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self

JSON

To clipboard

{
  "document": {
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE"
      }
    },
    "lang": "nl",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions:\n\n    NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein.\n\n    NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory.\n    This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings."
      },
      {
        "category": "description",
        "text": "VMware heeft kwetsbaarheden verholpen in VMware vCenter en VMware ESX producten.",
        "title": "Feiten"
      },
      {
        "category": "description",
        "text": "VMware vCenter bevat een kritieke authentication-bypass kwetsbaarheid in de Directory Service met kenmerk CVE-2026-59309. Deze kwetsbaarheid stelt een kwaadwillende met netwerktoegang tot VMware vCenter in staat deze kwetsbaarheid te misbruiken om de authenticatie te omzeilen en ongeautoriseerde toegang tot het systeem te verkrijgen. \n\nDaarnaast bevat VMware vCenter ook een kritieke directory-traversal kwetsbaarheid in de Syslog server met kenmerk CVE-2026-59310. Deze kwetsbaarheid kan een kwaadwillende in staat stellen willekeurige code uit te voeren, waardoor mogelijk bestands- en directorypaden kunnen worden gemanipuleerd en toegang kan worden verkregen tot bestanden buiten de bedoelde Syslog-directory.\n\nVMware ESX bevat een kritieke out-of-bounds write\u00a0kwetsbaarheid in de VMXNET3 virtuele netwerkadapter met kenmerk CVE-2026-47876. Deze kwetsbaarheid stelt een kwaadwillende met lokale beheerdersrechten op een virtuele machine met een VMXNET3 virtuele netwerkadapter in staat, code uit te voeren op de onderliggende host. Dit maakt het voor een kwaadwillende mogelijk, data buiten de bedoelde geheugenlimieten kan schrijven, wat kan leiden tot geheugenbeschadiging en onvoorspelbaar gedrag of compromittering van het virtuele systeem. Virtuele netwerkadapters die geen gebruikmaken van VMXNET3 zijn niet kwetsbaar. \n\nIn VMware ESX, Workstation en Fusion bevatten ook een out-of-bounds read kwetsbaarheid met kenmerk CVE-2026-41703. Misbruik van deze  kwetsbaarheid die kan resulteren in onbedoelde toegang tot geheugen buiten de toegewezen buffer, wat kan leiden tot informatielekken of systeeminstabiliteit binnen virtuele omgevingen. Daarnaast bevat VMware ESX een kwetsbaarheid met kenmerk CVE-2026-41709 door onvoldoende logging. Een kwaadwillende beheerder kan deze kwetsbaarheid misbruiken om bepaalde acties uit te voeren die niet in de logbestanden worden geregistreerd.\n\nHet is goed gebruik om toegang tot ESX en vCenter uitsluitend beschikbaar te stellen vanuit een gescheiden beheeromgeving waarin alleen geautoriseerde beheerders toegang hebben. Deze beheerinterfaces dienen niet rechtstreeks vanaf internet of externe netwerken toegankelijk te zijn.",
        "title": "Interpretaties"
      },
      {
        "category": "description",
        "text": "VMware heeft updates uitgebracht om de kwetsbaarheden in VMware vCenter, ESX, Workstation en Fusion te verhelpen. Zie bijgevoegde referenties voor meer informatie.",
        "title": "Oplossingen"
      },
      {
        "category": "general",
        "text": "medium",
        "title": "Kans"
      },
      {
        "category": "general",
        "text": "high",
        "title": "Schade"
      },
      {
        "category": "general",
        "text": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)",
        "title": "CWE-22"
      },
      {
        "category": "general",
        "text": "Out-of-bounds Read",
        "title": "CWE-125"
      },
      {
        "category": "general",
        "text": "Insufficient Logging",
        "title": "CWE-778"
      }
    ],
    "publisher": {
      "category": "coordinator",
      "contact_details": "cert@ncsc.nl",
      "name": "Nationaal Cyber Security Centrum",
      "namespace": "https://www.ncsc.nl/"
    },
    "references": [
      {
        "category": "external",
        "summary": "Reference",
        "url": "https://brcm.tech/vmsa-2026-0006"
      },
      {
        "category": "external",
        "summary": "Reference",
        "url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/38017"
      }
    ],
    "title": "Kwetsbaarheden verholpen in VMware producten",
    "tracking": {
      "current_release_date": "2026-07-29T13:29:48.283466Z",
      "generator": {
        "date": "2025-08-04T16:30:00Z",
        "engine": {
          "name": "V.A.",
          "version": "1.3"
        }
      },
      "id": "NCSC-2026-0269",
      "initial_release_date": "2026-07-29T12:46:05.577917Z",
      "revision_history": [
        {
          "date": "2026-07-29T12:46:05.577917Z",
          "number": "1.0.0",
          "summary": "Initiele versie"
        },
        {
          "date": "2026-07-29T13:29:48.283466Z",
          "number": "1.0.1",
          "summary": "In de eerste versie is per abuis verwezen naar ESXi in plaats van ESX. Dit is gecorrigeerd."
        }
      ],
      "status": "final",
      "version": "1.0.1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:unknown/*",
                "product": {
                  "name": "vers:unknown/*",
                  "product_id": "CSAFPID-1"
                }
              }
            ],
            "category": "product_name",
            "name": "ESX"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:unknown/*",
                "product": {
                  "name": "vers:unknown/*",
                  "product_id": "CSAFPID-2"
                }
              }
            ],
            "category": "product_name",
            "name": "Fusion"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:unknown/*",
                "product": {
                  "name": "vers:unknown/*",
                  "product_id": "CSAFPID-3"
                }
              }
            ],
            "category": "product_name",
            "name": "Workstation"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:unknown/*",
                "product": {
                  "name": "vers:unknown/*",
                  "product_id": "CSAFPID-4"
                }
              }
            ],
            "category": "product_name",
            "name": "vCenter"
          }
        ],
        "category": "vendor",
        "name": "VMware"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-59309",
      "notes": [
        {
          "category": "description",
          "text": "VMware vCenter contains an authentication bypass vulnerability within its VMware Directory Service, potentially allowing unauthorized access.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-59309 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-59309.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4"
          ]
        }
      ],
      "title": "CVE-2026-59309"
    },
    {
      "cve": "CVE-2026-59310",
      "notes": [
        {
          "category": "description",
          "text": "VMware vCenter\u0027s Syslog server contains a directory traversal vulnerability that could be exploited to access unauthorized files.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-59310 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-59310.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4"
          ]
        }
      ],
      "title": "CVE-2026-59310"
    },
    {
      "cve": "CVE-2026-47876",
      "notes": [
        {
          "category": "description",
          "text": "VMware ESX contains an out-of-bounds write vulnerability in its VMXNET3 virtual network adapter that could potentially be exploited to compromise system integrity.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-47876 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-47876.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.3,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4"
          ]
        }
      ],
      "title": "CVE-2026-47876"
    },
    {
      "cve": "CVE-2026-41703",
      "notes": [
        {
          "category": "description",
          "text": "VMware ESX, Workstation, and Fusion products contain a security vulnerability characterized by an out-of-bounds read, potentially impacting system stability and security.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-41703 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-41703.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.6,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4"
          ]
        }
      ],
      "title": "CVE-2026-41703"
    },
    {
      "cve": "CVE-2026-41709",
      "notes": [
        {
          "category": "description",
          "text": "VMware ESX contains a vulnerability characterized by insufficient logging, which may affect system monitoring and forensic capabilities.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-41709 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-41709.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 2.7,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4"
          ]
        }
      ],
      "title": "CVE-2026-41709"
    }
  ]
}

WID-SEC-W-2026-2569

Vulnerability from csaf_certbund - Published: 2026-07-28 22:00 - Updated: 2026-07-29 22:00

Summary

VMware Produkte: Mehrere Schwachstellen

Severity

Hoch

Notes

Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.

Produktbeschreibung: Die Virtualisierungssoftware von VMware ermöglicht die simultane Ausführung von verschiedenen Betriebssystemen auf einem Host-System.

Angriff: Ein Angreifer kann mehrere Schwachstellen in VMware ESXi, VMware vCenter Server, VMware Workstation und VMware Fusion ausnutzen, um einen Denial of Service zuverursachen, Informationen offenzulegen, Sicherheitsmaßnahmen zu umgehen und Code auszuführen.

Betroffene Betriebssysteme: - Linux - Sonstiges - UNIX - Windows

CVE-2026-41703

Affected products

Known affected 5 products

Product	Identifier	Version
VMware Workstation VMware	`cpe:/a:vmware:workstation:-`	—
VMware vCenter Server VMware	`cpe:/a:vmware:vcenter_server:-`	—
Google Cloud Platform Google	`cpe:/a:google:cloud_platform:-`	—
VMware ESXi VMware	`cpe:/o:vmware:esxi:-`	—
VMware Fusion VMware	`cpe:/a:vmware:fusion:-`	—

CVE-2026-41709

Affected products

Known affected 5 products

Product	Identifier	Version
VMware Workstation VMware	`cpe:/a:vmware:workstation:-`	—
VMware vCenter Server VMware	`cpe:/a:vmware:vcenter_server:-`	—
Google Cloud Platform Google	`cpe:/a:google:cloud_platform:-`	—
VMware ESXi VMware	`cpe:/o:vmware:esxi:-`	—
VMware Fusion VMware	`cpe:/a:vmware:fusion:-`	—

CVE-2026-47876

Affected products

Known affected 5 products

Product	Identifier	Version
VMware Workstation VMware	`cpe:/a:vmware:workstation:-`	—
VMware vCenter Server VMware	`cpe:/a:vmware:vcenter_server:-`	—
Google Cloud Platform Google	`cpe:/a:google:cloud_platform:-`	—
VMware ESXi VMware	`cpe:/o:vmware:esxi:-`	—
VMware Fusion VMware	`cpe:/a:vmware:fusion:-`	—

CVE-2026-59309

Affected products

Known affected 5 products

Product	Identifier	Version
VMware Workstation VMware	`cpe:/a:vmware:workstation:-`	—
VMware vCenter Server VMware	`cpe:/a:vmware:vcenter_server:-`	—
Google Cloud Platform Google	`cpe:/a:google:cloud_platform:-`	—
VMware ESXi VMware	`cpe:/o:vmware:esxi:-`	—
VMware Fusion VMware	`cpe:/a:vmware:fusion:-`	—

CVE-2026-59310

Affected products

Known affected 5 products

Product	Identifier	Version
VMware Workstation VMware	`cpe:/a:vmware:workstation:-`	—
VMware vCenter Server VMware	`cpe:/a:vmware:vcenter_server:-`	—
Google Cloud Platform Google	`cpe:/a:google:cloud_platform:-`	—
VMware ESXi VMware	`cpe:/o:vmware:esxi:-`	—
VMware Fusion VMware	`cpe:/a:vmware:fusion:-`	—

References

4 references

URL	Category
https://wid.cert-bund.de/.well-known/csaf/white/2…	self
https://wid.cert-bund.de/portal/wid/securityadvis…	self
https://support.broadcom.com/web/ecx/support-cont…	external
https://docs.cloud.google.com/support/bulletins#g…	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "text": "hoch"
    },
    "category": "csaf_base",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "de-DE",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
      },
      {
        "category": "description",
        "text": "Die Virtualisierungssoftware von VMware erm\u00f6glicht die simultane Ausf\u00fchrung von verschiedenen Betriebssystemen auf einem Host-System.",
        "title": "Produktbeschreibung"
      },
      {
        "category": "summary",
        "text": "Ein Angreifer kann mehrere Schwachstellen in VMware ESXi, VMware vCenter Server, VMware Workstation und VMware Fusion ausnutzen, um einen Denial of Service zuverursachen, Informationen offenzulegen, Sicherheitsma\u00dfnahmen zu umgehen und Code auszuf\u00fchren.",
        "title": "Angriff"
      },
      {
        "category": "general",
        "text": "- Linux\n- Sonstiges\n- UNIX\n- Windows",
        "title": "Betroffene Betriebssysteme"
      }
    ],
    "publisher": {
      "category": "other",
      "contact_details": "csaf-provider@cert-bund.de",
      "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
      "namespace": "https://www.bsi.bund.de"
    },
    "references": [
      {
        "category": "self",
        "summary": "WID-SEC-W-2026-2569 - CSAF Version",
        "url": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2569.json"
      },
      {
        "category": "self",
        "summary": "WID-SEC-2026-2569 - Portal Version",
        "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2569"
      },
      {
        "category": "external",
        "summary": "VMware Security Advisory VMSA-2026-0006 vom 2026-07-28",
        "url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/38017"
      },
      {
        "category": "external",
        "summary": "Google Cloud Platform Security Bulletin GCP-2026-050 vom 2026-07-29",
        "url": "https://docs.cloud.google.com/support/bulletins#gcp-2026-050"
      }
    ],
    "source_lang": "en-US",
    "title": "VMware Produkte: Mehrere Schwachstellen",
    "tracking": {
      "current_release_date": "2026-07-29T22:00:00.000+00:00",
      "generator": {
        "date": "2026-07-30T08:27:59.040+00:00",
        "engine": {
          "name": "BSI-WID",
          "version": "1.6.0"
        }
      },
      "id": "WID-SEC-W-2026-2569",
      "initial_release_date": "2026-07-28T22:00:00.000+00:00",
      "revision_history": [
        {
          "date": "2026-07-28T22:00:00.000+00:00",
          "number": "1",
          "summary": "Initiale Fassung"
        },
        {
          "date": "2026-07-29T22:00:00.000+00:00",
          "number": "2",
          "summary": "Neue Updates von Google aufgenommen"
        }
      ],
      "status": "final",
      "version": "2"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Google Cloud Platform",
            "product": {
              "name": "Google Cloud Platform",
              "product_id": "393401",
              "product_identification_helper": {
                "cpe": "cpe:/a:google:cloud_platform:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Google"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "VMware ESXi",
            "product": {
              "name": "VMware ESXi",
              "product_id": "1820472",
              "product_identification_helper": {
                "cpe": "cpe:/o:vmware:esxi:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "VMware Fusion",
            "product": {
              "name": "VMware Fusion",
              "product_id": "T009574",
              "product_identification_helper": {
                "cpe": "cpe:/a:vmware:fusion:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "VMware Workstation",
            "product": {
              "name": "VMware Workstation",
              "product_id": "11768",
              "product_identification_helper": {
                "cpe": "cpe:/a:vmware:workstation:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "VMware vCenter Server",
            "product": {
              "name": "VMware vCenter Server",
              "product_id": "T012302",
              "product_identification_helper": {
                "cpe": "cpe:/a:vmware:vcenter_server:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "VMware"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-41703",
      "product_status": {
        "known_affected": [
          "11768",
          "T012302",
          "393401",
          "1820472",
          "T009574"
        ]
      },
      "release_date": "2026-07-28T22:00:00.000+00:00",
      "title": "CVE-2026-41703"
    },
    {
      "cve": "CVE-2026-41709",
      "product_status": {
        "known_affected": [
          "11768",
          "T012302",
          "393401",
          "1820472",
          "T009574"
        ]
      },
      "release_date": "2026-07-28T22:00:00.000+00:00",
      "title": "CVE-2026-41709"
    },
    {
      "cve": "CVE-2026-47876",
      "product_status": {
        "known_affected": [
          "11768",
          "T012302",
          "393401",
          "1820472",
          "T009574"
        ]
      },
      "release_date": "2026-07-28T22:00:00.000+00:00",
      "title": "CVE-2026-47876"
    },
    {
      "cve": "CVE-2026-59309",
      "product_status": {
        "known_affected": [
          "11768",
          "T012302",
          "393401",
          "1820472",
          "T009574"
        ]
      },
      "release_date": "2026-07-28T22:00:00.000+00:00",
      "title": "CVE-2026-59309"
    },
    {
      "cve": "CVE-2026-59310",
      "product_status": {
        "known_affected": [
          "11768",
          "T012302",
          "393401",
          "1820472",
          "T009574"
        ]
      },
      "release_date": "2026-07-28T22:00:00.000+00:00",
      "title": "CVE-2026-59310"
    }
  ]
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.

Action not permitted

CVE-2026-59310 (GCVE-0-2026-59310)

CERTFR-2026-AVI-0949

Solutions

GHSA-V2GP-49GJ-2C9F

NCSC-2026-0269

WID-SEC-W-2026-2569

Tags

Sightings

Nomenclature