CVE-2026-59310: Broadcom VMware vCenter

Broadcom VMware vCenter contains a path traversal vulnerability which could allow a threat actor with network access to vCenter to execute arbitrary code.

Vendor: Broadcom
Product: VMware vCenter
Vulnerability: Broadcom VMware vCenter Path Traversal Vulnerability
Date added: Aug 18, 2026
CISA due date (U.S. federal agencies): Aug 21, 2026
Known ransomware campaign use: Known
Weakness (CWE): CWE-22

References

NVD — CVE-2026-59310
support.broadcom.com
www.cisa.gov
www.cisa.gov
nvd.nist.gov

This site summarizes CISA's catalog for information only. It is not security advice — follow your vendor's guidance and official advisories.

Last updated: Oct 4, 2026 17:31 UTC · Catalog version 2026.10.02