CVE-2026-59310

CRITICAL

Vmware Cloud Foundation < 9.1.x.x - Path Traversal

Title source: rule

Description

VMware vCenter contains a directory traversal vulnerability in the Syslog server. A malicious actor with network access to vCenter may exploit this issue to execute arbitrary code.

References (1)

Core 1

Core References

https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/38017

Scores

CVSS v3 9.8

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable yes

Technical Impact total

Details

CWE

CWE-22

Status published

Products (13)

VMware/Cloud Foundation 5.x

VMware/Cloud Foundation 9.0.x.x

VMware/Cloud Foundation 9.1.x.x

VMware/Telco Cloud Infrastructure 3.0

VMware/Telco Cloud Platform 3.0

VMware/Telco Cloud Platform 4.x

VMware/Telco Cloud Platform 5.0.x

VMware/Telco Cloud Platform 5.1.x

VMware/vCenter 8.0 - 8.0 U3k

VMware/vCenter 9.0.x.x - 9.0.2.0100

... and 3 more

Published Jul 30, 2026

Tracked Since Jul 30, 2026