Skip to content
Threat Feed
Subscribe

Product

VMware Cloud Foundation

2 briefs RSS
critical advisory

Critical Vulnerabilities in VMware vCenter and ESX Products

Multiple critical vulnerabilities, including CVE-2026-59309 and CVE-2026-59310 with CVSS 9.8, affect VMware vCenter and ESX/ESXi products, enabling unauthorized access without credentials, arbitrary code execution, virtualization escape, information disclosure, and defense evasion, which could lead to full system compromise and data breaches.

PoC VMware vCenter +13 virtualization critical-vulnerability rce unauthorized-access privilege-escalation defense-evasion esxi vcenter
5t 5c updated
high threat

VMware Cloud Foundation, vSphere, Aria Operations, and Tools: Multiple Vulnerabilities

Multiple vulnerabilities exist in VMware Cloud Foundation, vSphere, Aria Operations, and VMware Tools, allowing an attacker to exploit these weaknesses to gain elevated privileges, including administrative access, and disclose confidential information within affected environments.

exploited VMware Cloud Foundation +3 virtualization cloud privilege-escalation
1t