Three Critical VMware Flaws Allow Auth Bypass, Code Execution, and VM Escape

Kurzinfo

Metadaten

  • Original (extern): Link oeffnen
  • Veroeffentlicht: 2026-07-29 15:31 UTC
  • Importiert: 2026-08-05 11:32 UTC
  • CVSS: 9.8
  • Quelle-ID: thn_global
  • uid_hash: cbb7ba20954e6f983bef647cfc46f1c1a2a625d905c77e2e162f7776614ab874

Inhalt

Broadcom has released security updates to address multiple security flaws impacting VMware ESX, vCenter, Workstation, and Fusion, three of which have been designated as critical in severity.

The first of the three critical-rated flaws is CVE-2026-59309 (CVSS score: 9.8), which has been described as an authentication bypass in VMware vCenter.

"A malicious actor with network access to vCenter

Verknuepfte CVEs

CVE-ID Severity (Quelle) CVSS (Quelle) Severity (CVE.org) CVSS (CVE.org) EPSS EPSS-Pctl Veroeffentlicht (CVE.org)

CVE-2026-59309

CRITICAL

9.8

CRITICAL

9.8

2026-07-30

Quellen-Details

Bezeichnung Name Kategorie Tags Zielgruppe Sprache Feed-URL
The Hacker News

thn_global

security_news - de https://feeds.feedburner.com/TheHackersNews