← Back

CVE-2026-59310

nvd nist
Published: Jul 30, 2026Modified: Aug 19, 2026CISA KEV

JSON object

Loading...
9.8
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 3.9 / Impact: 5.9
Source: security@vmware.com (Secondary)

Description

VMware vCenter contains a directory traversal vulnerability in the Syslog server. A malicious actor with network access to vCenter may exploit this issue to execute arbitrary code.

Affected (29)

Vmware
1 product
Vcenter Server
Configuration A
27 vulnerable · 2 platform
Vulnerable SoftwareAffected Versions
Vmware
Vcenter Server
Before 8.0
Vcenter Server
Version 8.0
Vcenter Server
Version 8.0 a
Vcenter Server
Version 8.0 b
Vcenter Server
Version 8.0 c
Vcenter Server
Version 8.0 update1
Vcenter Server
Version 8.0 update1a
Vcenter Server
Version 8.0 update1b
Vcenter Server
Version 8.0 update1c
Vcenter Server
Version 8.0 update1d
Vcenter Server
Version 8.0 update1e
Vcenter Server
Version 8.0 update2
Vcenter Server
Version 8.0 update2a
Vcenter Server
Version 8.0 update2b
Vcenter Server
Version 8.0 update2c
Vcenter Server
Version 8.0 update2d
Vcenter Server
Version 8.0 update2e
Vcenter Server
Version 8.0 update3
Vcenter Server
Version 8.0 update3a
Vcenter Server
Version 8.0 update3b
Vcenter Server
Version 8.0 update3c
Vcenter Server
Version 8.0 update3d
Vcenter Server
Version 8.0 update3e
Vcenter Server
Version 8.0 update3g
Vcenter Server
Version 8.0 update3h
Vcenter Server
Version 8.0 update3i
Vcenter Server
Version 8.0 update3j
Running on/withPlatform Versions
Vmware
Telco Cloud Infrastructure
Version 3.0
Vmware
Telco Cloud Platform
From 3.0 to 5.2
Configuration B
2 vulnerable · 2 platform
Vulnerable SoftwareAffected Versions
Vmware
Vcenter Server
From 9.0 to 9.0.2.0100
Vcenter Server
From 9.1 to 9.1.0.0300
Running on/withPlatform Versions
Vmware
Cloud Foundation
All versions
Vmware
Vsphere Foundation
All versions

Related CWEs

CWE-22
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

References (4)

Source: security@vmware.com
Vendor Advisory
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0
Third Party Advisory
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0
Third Party Advisory
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0
US Government Resource

Timeline

No history available yet.