CISA Warns Hackers Are Actively Exploiting VMware vCenter Path Traversal Flaw

Gbhackers •Divya • August 19, 2026

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a critical vulnerability affecting Broadcom VMware vCenter to its Known Exploited Vulnerabilities (KEV) Catalog. The vulnerability, tracked as CVE-2026-59310, is a path traversal flaw that enables arbitrary code execution in affected vCenter deployments. VMware vCenter Path Traversal Flaw CVE-2026-59310 impacts the VMware vCenter Syslog Server […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Active Exploitation of VMware vCenter Path Traversal Vulnerability CVE-2026-59310 A critical vulnerability in VMware vCenter, tracked as CVE-2026-59310, is being actively exploited, allowing attackers to execute arbitrary code via a path traversal flaw in the Syslog Server. This vulnerability, disclosed on July 30, 2026, was added to CISA's Known Exploited Vulnerabilities Catalog on August 18, 2026. Attackers are leveraging this flaw to gain full control over virtual infrastructures, with reports indicating at least 361 affected IP addresses. The exploitation escalated rapidly, with a public proof of concept released on August 17, 2026. A separate vulnerability, CVE-2026-59309, has also been identified but is considered possibly unrelated. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued warnings regarding the ongoing exploitation. Organizations using affected VMware vCenter deployments are urged to take immediate action to mitigate risks. 4 sources 77

Extracted Entities

CISA Warns Hackers Are Actively Exploiting VMware vCenter Path Traversal Flaw

The full story

Extracted Entities

CVEs (1)

CWE Weaknesses (1)

Platforms (1)