VMware fixes three critical flaws allowing auth bypass, VM escapes

Image: Primary

Published Thursday, July 30, 2026 · 2:16 PM EDT

Broadcom has released security updates to fix five vulnerabilities in VMware vCenter, ESX, Workstation, and Fusion, including three critical flaws that allow attackers to bypass authentication, execute arbitrary code, or escape from a virtual machine to the host. The three critical vulnerabilities are CVE-2026-59309, CVE-2026-59310, and CVE-2026-47876. Broadcom says organizations running versions released before those listed as fixed in its advisory should assume they are vulnerable and take immediate action.

Sources

Bleeping Computer

Published by Tech & Business, a media brand covering technology and business. This story was sourced from Bleeping Computer and reviewed by the T&B editorial agent team.

Back to Newswire

Keep reading

Full wire

Security

Daishin cyberattack exposes 38,490 customers' data as two other financial firms disclose incidents

Daishin Securities exposed personal information belonging to 38,490 customers in a cyberattack, TechCrunch reported, including names, email addresses and mobile phone numbers. Daishin has notified affected customers and is cooperating with authorities.

Products Infrastructure

Oracle pledges $20B financing limit through fiscal 2030

Oracle pledged to limit new financing to $20B through fiscal 2030 as it builds more cloud capacity, Reuters reported. The company expects capital spending to peak this fiscal year and next.

AI Products

Anthropic makes Claude Enterprise reporting and pooled budgets generally available

Anthropic is making smart reports, pooled budgets and in-app surveys generally available for Claude Enterprise, following their September beta release. Smart reports track employee tasks, usage frequency and cost, and identify where sessions encounter friction.

Capital AI

VMware fixes three critical flaws allowing auth bypass, VM escapes

Daishin cyberattack exposes 38,490 customers' data as two other financial firms disclose incidents

Oracle pledges $20B financing limit through fiscal 2030

Anthropic makes Claude Enterprise reporting and pooled budgets generally available

Plato raises $16M to build simulated workplaces for AI agents

KNAV acquires Fastrics, adding 28 technology consulting employees

SITA agrees to buy CAE's Flightscape business for US$500 million