CVE Catalog
CVE-2026-59309
CriticalCVSS 9.8Summary
VMware vCenter contains an authentication bypass vulnerability in the VMware Directory Service. A malicious actor with network access to vCenter may exploit this issue to bypass authentication and gain unauthorized access to the system.
Risk Assessment
An attacker can gain unauthorized access to vCenter, potentially leading to full control over the virtualization environment and access to all managed virtual machines.
Recommendation
Immediately apply patches provided by VMware and restrict network access to the VMware Directory Service.
Original NVD description (English source)
VMware vCenter contains an authentication bypass vulnerability in the VMware Directory Service. A malicious actor with network access to vCenter may exploit this issue to bypass authentication and gain unauthorized access to the system.