CVE-2024-37079

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

January 23, 2026

Last Seen

September 15, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Ransomware Exploits Critical VMware vCenter Vulnerability CVE-2026-5931072.9

On September 15, 2026, CISA confirmed that ransomware gangs are actively exploiting a critical remote code execution vulnerability in VMware vCenter Server, tracked as CVE-2026-59310, which has a CVSS score of 9.8. This flaw, residing in the vCenter Syslog server, allows unauthenticated attackers wi...

CISA Identifies Critical VMware vCenter Vulnerability CVE-2024-37079 Under Active Exploitation60.7

CISA has added the critical vulnerability CVE-2024-37079 affecting VMware vCenter Server to its Known Exploited Vulnerabilities catalog. Active exploitation of this vulnerability has been detected, impacting enterprise environments that utilize vCenter for virtualization management.

Exploitation of Critical VMware vCenter Server Bug CVE-2024-3707948.8

A critical vulnerability in VMware vCenter Server, tracked as CVE-2024-37079, is being actively exploited more than a year after Broadcom issued a patch. This out-of-bounds write flaw in the DCERPC protocol has a CVSS rating of 9.8, indicating a severe security risk for affected systems. Organizatio...

CISA Confirms Active Exploitation of VMware ESXi CVE-2025-2222520.3

CISA has confirmed the active exploitation of a critical vulnerability in VMware ESXi, tracked as CVE-2025-22225. This zero-day flaw allows attackers to escape security sandboxes and is currently being used in ransomware operations. The vulnerability, classified as an arbitrary write memory issue, w...