Back Cybersecuritynews

CISA Warns of Critical VMware vCenter RCE Vulnerability Now Exploited in Attacks

Cybersecuritynews •Guru Baran • January 24, 2026

The Cybersecurity and Infrastructure Security Agency (CISA) has added a critical vulnerability affecting Broadcom’s VMware vCenter Server to its Known Exploited Vulnerabilities (KEV) catalog. This addition confirms that active exploitation of CVE-2024-37079 has been detected in the wild, posing a significant risk to enterprise environments that rely on vCenter for virtualization management. The vulnerability, originally […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

CISA Identifies Critical VMware vCenter Vulnerability CVE-2024-37079 Under Active Exploitation CISA has added the critical vulnerability CVE-2024-37079 affecting VMware vCenter Server to its Known Exploited Vulnerabilities catalog. Active exploitation of this vulnerability has been detected, impacting enterprise environments that utilize vCenter for virtualization management. 9 sources 61

Extracted Entities

CISA Warns of Critical VMware vCenter RCE Vulnerability Now Exploited in Attacks

The full story

Extracted Entities

Companies (1)

CVEs (1)

Tools (1)