CVE-2026-59310

Unauthenticated attackers exploited a path traversal flaw in VMware vCenter to execute arbitrary code and establish persistent backdoors.

A path traversal vulnerability in the VMware vCenter Syslog server allowed unauthenticated attackers with network access to execute arbitrary code and deploy reverse SSH tools for persistent access. DIB organizations must ensure vCenter is patched and network-isolated, as this flaw was actively exploited in the wild to gain initial footholds before attackers deployed further tooling.

Shame score — A maximum-severity path traversal flaw was actively exploited in the wild by unauthenticated attackers to execute arbitrary code and establish persistent backdoors, indicating negligent patching and avoidable exposure.