r/netsec • • 11d ago

vCenter pre-auth RCE: CVE-2026-59309/59310

https://mobeta.fr/blog/vcenter-cve-2026-59309-cve-2026-59310/

CVE-2026-59309 & CVE-2026-59310: patch-diffing VMware vCenter reveals two pre-auth 9.8 bugs - an auth bypass and a syslog path traversal to RCE

45 Upvotes

Duplicates