Attackers Exploit VMware vCenter Vulnerability to Gain Persistent Remote Access
Read with caution - this story is only being covered by one news source that has a ‘low factuality’ rating, which means the outlet has a history of poor reporting practices. Learn more about factuality ratings here.8 Articles
8 Articles
Cyber threats continue to evolve, with attackers exploiting new vulnerabilities to achieve their goals. In this article, we examine one of the critical vulnerabilities in VMware vCenter. Attackers have begun exploiting a recently patched critical vulnerability in Broadcom VMware vCenter, according to new findings from QUIRSO. The vulnerability in question is CVE-2026-59310 (CVSS score: 9.8), a directory bypass vulnerability in the VMware vCenter…
Corrected on 29 July, exploited as early as 3 August: VMware vCenter's critical flaw makes victims in 47 countries, and France is in high place on the table. In many companies, the corrective is still waiting.
Attackers actively use a patched VMware vCenter gap. They secure permanent remote access to servers via reverse_ssh. Security researchers from the German IT security company QUIRSO warn against the active exploitation of a critical vulnerability in Broadcom's VMware vCenter virtualization software. The vulnerability is managed under the CVE-2026-59310 identifier and reaches the maximum CVSS severity of 9.8. It is a path-through error (Directory …
Attackers Exploit VMware vCenter Vulnerability to Gain Persistent Remote Access
Threat actors have begun to actively exploit a recently patched critical security flaw in Broadcom VMware vCenter, according to new findings from QUIRSO. The vulnerability in question is CVE-2026-59310 (CVSS score: 9.8), a directory-traversal vulnerability in the VMware vCenter server that a malicious actor with network access can exploit to execute arbitrary code. Patches for the flaw were
Coverage Details
Bias Distribution
- 100% of the sources lean Right
Factuality
To view factuality data please Upgrade to Premium
