Skip to Content

A critical VMware vCenter flaw is already being exploited in ransomware campaigns

On August 18, the US CISA added vCenter's CVE-2026-59310, which Broadcom had patched on July 29, to its catalog of known exploited vulnerabilities.
August 18, 2026
Curated High

What it says

  • It is a directory traversal flaw in the vCenter Syslog server: an attacker with network access to vCenter can execute arbitrary code. Broadcom assigns it a CVSSv3 score of 9.8.
  • It was fixed in advisory VMSA-2026-0006, along with four other CVEs in ESX, vCenter, Workstation, and Fusion. Broadcom states that there is no workaround other than the patch.
  • The advisory was updated on August 3 with express patches for version 8.0 U2f and on August 19 with guidance for the 7.0 branch.
  • CISA flags it as used in ransomware campaigns, gave federal agencies until August 21 to fix it, and requires them to carry out forensic triage.

Broadcom advisory VMSA-2026-0006: support.broadcom.com

The Tech Guardian summarizes and comments in its own words on third-party publications. The full information belongs to the original source, which we recommend you read.

Our take

vCenter governs all virtualization: whoever gets in there can encrypt all the servers at once. If you have it, check today the version and that it is not reachable from the internet or from user networks. And if you did not patch in early August, patching now is not enough: look for signs of intrusion, because CISA asks for forensic triage for a reason.

IBM and the University of Chicago claim quantum advantage with 70 logical qubits
IBM and University of Chicago researchers announced on July 30 a demonstration that, in their view, meets the criteria for quantum advantage with verifiable results.