CVE Catalog
CVE-2026-59310
CriticalCVSS 9.8Summary
VMware vCenter contains a directory traversal vulnerability in the Syslog server. A malicious actor with network access to vCenter may exploit this issue to execute arbitrary code.
Risk Assessment
An attacker can remotely execute arbitrary code on the vCenter server, leading to full compromise of the virtualization infrastructure and potential data breach.
Recommendation
Immediately apply patches provided by VMware and restrict network access to the Syslog server.
Original NVD description (English source)
VMware vCenter contains a directory traversal vulnerability in the Syslog server. A malicious actor with network access to vCenter may exploit this issue to execute arbitrary code.