VulnerabilityBleeping Computer
9.8 — CRITICAL
Critical VMware vCenter RCE flaw exploited for reverse SSH access
A recently patched critical vulnerability (CVE-2026-59310) in VMware vCenter Syslog Server is being exploited in an active campaign to deploy a reverse SSH tool for persistence and remote access. [...]
🤖 AI BriefingAuto-generated threat analysis
🔍Threat Overview
A critical VMware vCenter RCE flaw (CVE-2026-59310) is being exploited in an active campaign for reverse SSH access, compromising over 361 IP addresses across 47 countries with a high likelihood of data theft and operational disruptions.
⚙️Technical Details
💥Impact Assessment
Severity: High
🛡️Recommended Actions
1Apply the emergency update for VMware vCenter Syslog Server (CVE-2026-59310) as soon as possible.
2Monitor system logs for suspicious activity and implement additional security measures to prevent unauthorized access.
3Verify that all vCenter releases addressed by Broadcom are up-to-date and configured correctly.
📦Affected Products
VMware vCenter Syslog Server
🔐NVD Verified DataVERIFIED
CVE-2026-59310 ↗CVSS 9.8 — CRITICAL
Attack Vector
NETWORK
Complexity
LOW
Vector String
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HWeaknesses
CWE-22
Read the full article
This is a curated summary. The complete article is available at Bleeping Computer.