Broadcom VMware vCenter Path Traversal Vulnerability

Are you affected?

Enter the version you run. The result uses only the ranges stored on this record.

The check returns affected, not affected, or incomplete. It does not guess a version that is missing from the record.

• cpe vmware/vcenter server8.0
• vendor Broadcom VMware vCenterversion unspecified

How to fix CVE-2026-59310

• Recommended remediation

  Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines. CISA due date Aug 21, 2026.

• Official advisories

  • CISA KEV · cisa.gov
  • CVE.org · cve.org
  • FIRST EPSS · first.org
  • Google Cloud Security Bulletins · docs.cloud.google.com
  • NIST NVD · nvd.nist.gov
  • Rapid7 Vulnerability Database · rapid7.com

What to do

Three questions, each answered from this record only. Confirm the vendor advisory before you patch.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

1. Jul 30, 2026 · Catalog

   Detected

   VMware vCenter contains a directory traversal vulnerability in the Syslog server. A malicious actor with network access to vCenter may exploit this issue to execute arbitrary code.

2. Aug 18, 2026 · CISA KEV

   Known exploited

   Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating

3. Aug 18, 2026 · Catalog

   Updated

   VMware vCenter contains a directory traversal vulnerability in the Syslog server. A malicious actor with network access to vCenter may exploit this issue to execute arbitrary code.

4. Aug 21, 2026 · CISA KEV

   Remediation due

   Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating

Sources

• CISA KEVConfirmed exploitationCVE-2026-59310

  Broadcom VMware vCenter contains a path traversal vulnerability which could allow a threat actor with network access to vCenter to execute arbitrary code.

  cisa.gov
• CVE.orgVulnerability recordCVE-2026-59310

  Official CVE identifier

  cve.org
• FIRST EPSSExploitation probabilityCVE-2026-59310

  30-day exploitation probability 2.6%

  first.org
• Google Cloud Security BulletinsVendor advisoryCVE-2026-59310

  Published: 2026-07-29 Description Description Severity Notes Per advisory VMSA-2026-0006, multiple vulnerabilities in VMware ESXi, and vCenter were privately reported to Broadcom. We are in the process of applying the necessary patches supplied by Broadcom. There are no known wor

  docs.cloud.google.com
• NIST NVDVulnerability recordCVE-2026-59310

  VMware vCenter contains a directory traversal vulnerability in the Syslog server. A malicious actor with network access to vCenter may exploit this issue to execute arbitrary code.

  nvd.nist.gov
• Rapid7 Vulnerability DatabaseResearchCVE-2026-59310

  Overview On July 29, 2026, Broadcom published security advisory VMSA-2026-0006 addressing multiple vulnerabilities in several VMWare products. Included in the advisory are two critical remotely exploitable vulnerabilities affecting VMware vCenter Server: CVE-2026-59309 and CVE-2026-59310 . Both vulnerabilities carry CVSSv3.1 base scores of 9.8 and can be exploited by unauthenticated attackers with

  rapid7.com
• VulnCheck KEVConfirmed exploitationCVE-2026-59310

  Broadcom VMware vCenter contains a path traversal vulnerability which could allow a threat actor with network access to vCenter to execute arbitrary code.

  vulncheck.com

References

• VulnCheck exploitation evidence · cydome.io
• Third Party Advisory · medium.com
• Third Party Advisory · medium.com
• CISA note · nvd.nist.gov
• VulnCheck exploitation evidence · previdian.com
• CISA note · support.broadcom.com
• US Government Resource · cisa.gov
• CISA note · cisa.gov
• CISA note · cisa.gov
• VulnCheck exploitation evidence · cisa.gov
• VulnCheck exploitation evidence · recordedfuture.com

Freshness

Last verified in this catalog Oct 18, 2026. Significant claims (KEV, EPSS, CVSS, affected ranges) come from the source rows above — open the original publisher for the authoritative advisory.