Recent findings from QUIRSO reveal that threat actors are actively exploiting a critical security vulnerability in Broadcom VMware vCenter, identified as CVE-2026-59310, which carries a CVSS score of 9.8. This directory-traversal vulnerability allows malicious actors with network access to execute arbitrary code, potentially granting them persistent remote access to affected systems. While patches have been made available, the rapid exploitation of this flaw underscores the need for immediate attention from organizations utilizing VMware vCenter.
For businesses, the practical implications of this vulnerability are significant. Organizations leveraging VMware vCenter should prioritize the implementation of the latest patches to mitigate the risk of unauthorized access and potential data breaches. This situation highlights the importance of maintaining robust cybersecurity protocols, including regular vulnerability assessments and timely updates. As cyber threats continue to evolve, particularly with the rise of sophisticated attack vectors targeting popular software solutions, proactive measures in cybersecurity are essential to safeguard sensitive data and maintain operational integrity.
---
*Originally reported by [The Hacker News](https://thehackernews.com/2026/08/attackers-exploit-vmware-vcenter.html)*