CVE-2026-59309

LLM-synthesized narrative grounded in this CVE's description and references.

• VMware/Vcenter Server28 versions

  cpe:2.3:a:vmware:vcenter_server:*:*:*:*:*:*:*:*+ 27 more

  • cpe:2.3:a:vmware:vcenter_server:*:*:*:*:*:*:*:*range: <8.0
  • cpe:2.3:a:vmware:vcenter_server:8.0:-:*:*:*:*:*:*
  • cpe:2.3:a:vmware:vcenter_server:8.0:a:*:*:*:*:*:*
  • cpe:2.3:a:vmware:vcenter_server:8.0:b:*:*:*:*:*:*
  • cpe:2.3:a:vmware:vcenter_server:8.0:c:*:*:*:*:*:*
  • cpe:2.3:a:vmware:vcenter_server:8.0:update1:*:*:*:*:*:*
  • cpe:2.3:a:vmware:vcenter_server:8.0:update1a:*:*:*:*:*:*
  • cpe:2.3:a:vmware:vcenter_server:8.0:update1b:*:*:*:*:*:*
  • cpe:2.3:a:vmware:vcenter_server:8.0:update1c:*:*:*:*:*:*
  • cpe:2.3:a:vmware:vcenter_server:8.0:update1d:*:*:*:*:*:*
  • cpe:2.3:a:vmware:vcenter_server:8.0:update1e:*:*:*:*:*:*
  • cpe:2.3:a:vmware:vcenter_server:8.0:update2:*:*:*:*:*:*
  • cpe:2.3:a:vmware:vcenter_server:8.0:update2a:*:*:*:*:*:*
  • cpe:2.3:a:vmware:vcenter_server:8.0:update2b:*:*:*:*:*:*
  • cpe:2.3:a:vmware:vcenter_server:8.0:update2c:*:*:*:*:*:*
  • cpe:2.3:a:vmware:vcenter_server:8.0:update2d:*:*:*:*:*:*
  • cpe:2.3:a:vmware:vcenter_server:8.0:update2e:*:*:*:*:*:*
  • cpe:2.3:a:vmware:vcenter_server:8.0:update3:*:*:*:*:*:*
  • cpe:2.3:a:vmware:vcenter_server:8.0:update3a:*:*:*:*:*:*
  • cpe:2.3:a:vmware:vcenter_server:8.0:update3b:*:*:*:*:*:*
  • cpe:2.3:a:vmware:vcenter_server:8.0:update3c:*:*:*:*:*:*
  • cpe:2.3:a:vmware:vcenter_server:8.0:update3d:*:*:*:*:*:*
  • cpe:2.3:a:vmware:vcenter_server:8.0:update3e:*:*:*:*:*:*
  • cpe:2.3:a:vmware:vcenter_server:8.0:update3g:*:*:*:*:*:*
  • cpe:2.3:a:vmware:vcenter_server:8.0:update3h:*:*:*:*:*:*
  • cpe:2.3:a:vmware:vcenter_server:8.0:update3i:*:*:*:*:*:*
  • cpe:2.3:a:vmware:vcenter_server:8.0:update3j:*:*:*:*:*:*
  • (no CPE)
• Broadcom Corporation/vCenterllm-fuzzy

• support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/38017nvdVendor Advisory

• Critical VMware Workstation and Fusion Flaw Lets VM Admins Execute Host Code
  The Hacker News · Sep 5, 2026
• VMware vCenter Attackers Drop JSP Webshell Disguised as Performance Update
  Cyber Security News · Aug 18, 2026
• Suspected China-Nexus Actor Exploits VMware vCenter Flaw, Deploys Babuk-Derived Ransomware
  The Hacker News · Aug 17, 2026
• Cyber Security Weekly Newsletter – Outlook RCE, Palo Alto, Cisco 0-day and Windows 0-Day Flaws +20 Stories
  Cyber Security News · Aug 16, 2026
• Attackers Exploit VMware vCenter Vulnerability to Gain Persistent Remote Access
  The Hacker News · Aug 12, 2026
• Hackers Actively Scanning to Exploit VMware VCenter Vulnerabilities
  Cyber Security News · Aug 11, 2026
• 3rd August – Threat Intelligence Report
  Check Point Research · Aug 3, 2026
• Weekly Cyber Security Newsletter– Claude Hacked 3 Companies, Cisco 0-Day, Word Copilot and VMware Flaw +20 Stories
  Cyber Security News · Aug 2, 2026
• VMware fixes three critical flaws allowing auth bypass, VM escapes
  BleepingComputer · Jul 30, 2026
• Critical VMware vCenter Vulnerabilities Allow Authentication Bypass and Remote Code Execution (CVE-2026-59309, CVE-2026-59310)
  Rapid7 Blog · Jul 30, 2026
• Three Critical VMware Flaws Allow Auth Bypass, Code Execution, and VM Escape
  The Hacker News · Jul 29, 2026
• Critical VM Escape Vulnerability Patched in VMware ESXi
  SecurityWeek · Jul 29, 2026
• Critical VMware Flaws Allow Attackers to Bypass Authentication and Gain Access to the System
  Cyber Security News · Jul 29, 2026