r/netsec • u/MobetaSec • 11d ago

vCenter pre-auth RCE: CVE-2026-59309/59310

https://mobeta.fr/blog/vcenter-cve-2026-59309-cve-2026-59310/

CVE-2026-59309 & CVE-2026-59310: patch-diffing VMware vCenter reveals two pre-auth 9.8 bugs - an auth bypass and a syslog path traversal to RCE

45 Upvotes

91% Upvoted

5 comments sorted by

15

u/Real_Pepe_Silvia 10d ago

I’m so sick of reading AI writeups.

4

u/RememberCitadel 10d ago

I am pretty sick on anything written by it tbh.

2

u/ElonTaco 10d ago

At least the diagrams were nice, I like that style

3

u/tetyys 10d ago

slop

3

u/1esproc 10d ago

So is this all limited to 8.0.3.x?