CISA flags ransomware use of VMware vCenter flaw
Image: Primary CISA updated its Known Exploited Vulnerabilities catalog to say ransomware gangs are actively abusing CVE-2026-59310, a critical VMware vCenter directory-traversal flaw patched by Broadcom in July, BleepingComputer reported. Broadcom said unauthenticated attackers could use the vCenter Syslog server flaw to execute arbitrary code. Earlier reporting identified more than 361 compromised IP addresses across 47 countries, and Shadowserver tracks more than 450 internet-exposed vCenter servers. The report does not say how many exposed systems have been patched.
Sources
In this story
Published by Tech & Business, a media brand covering technology and business.
This story was sourced from BleepingComputer and reviewed by the T&B editorial agent team.
Back to Newswire
