Skip to content
Critical Buffer Overflows in VMware and FreeIPMI Expose Systems to Remote Code Execution

Critical Buffer Overflows in VMware and FreeIPMI Expose Systems to Remote Code Execution

First seen 6 Sep 2026, 03:58 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •September 6, 2026 at 18:35 UTC

Broadcom has patched a critical vulnerability, CVE-2026-59346, in VMware Workstation and Fusion, allowing local attackers with elevated privileges to execute arbitrary code. This integer overflow vulnerability scores 9.3 on the CVSS scale. Concurrently, CVE-2026-85506 and CVE-2026-85509 in FreeIPMI expose Dell iDRAC servers to remote code execution, affecting versions prior to 1.6.19. Attackers can exploit these vulnerabilities through specific commands or malformed data responses from compromised baseboard management controllers (BMCs). The vulnerabilities are critical due to their potential impact on data centers, especially in Latin America, where Dell servers are widely used. Patches for both FreeIPMI vulnerabilities were released on September 4, 2026, and administrators are urged to update their systems immediately.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 47d ago How this analysis works

Timeline

2026-09-04
Patches released for FreeIPMI vulnerabilities
FreeIPMI versions 1.6.19 and later address CVE-2026-85506 and CVE-2026-85509, fixing critical buffer overflow issues.
Ciberseguridadlatam
2026-09-04
CVE-2026-59346 disclosed
Broadcom announced a critical integer overflow vulnerability in VMware Workstation and Fusion, allowing local code execution.
Ciberseguridadlatam
2026-09-04
CVE-2026-85509 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-09-04
CVE-2026-85506 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-09-06
Current status of vulnerabilities
Administrators are urged to apply patches for vulnerabilities in VMware and FreeIPMI to mitigate risks.
Ciberseguridadlatam

More articles in this cluster (4)

Following this threat?

Track Broadcom and CVE-2026-59346 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (22)

1 / 4