{"id":2089,"date":"2026-07-29T17:11:59","date_gmt":"2026-07-29T17:11:59","guid":{"rendered":"https:\/\/thedigitalfortress.us\/?p=2089"},"modified":"2026-07-29T17:11:59","modified_gmt":"2026-07-29T17:11:59","slug":"three-critical-vmware-flaws-allow-auth-bypass-code-execution-and-vm-escape","status":"publish","type":"post","link":"https:\/\/thedigitalfortress.us\/?p=2089","title":{"rendered":"Three Critical VMware Flaws Allow Auth Bypass, Code Execution, and VM Escape"},"content":{"rendered":"
\n

\ue804<\/i>Ravie Lakshmanan<\/span>\ue802<\/i>Jul 29, 2026<\/span><\/span>Vulnerability \/ Enterprise Security<\/span><\/p>\n<\/div>\n

\n
<\/a><\/div>\n

Broadcom has released<\/a> security updates to address multiple security flaws impacting VMware ESX, vCenter, Workstation, and Fusion, three of which have been designated as critical in severity.<\/p>\n

The first of the three critical-rated flaws is CVE-2026-59309<\/strong> (CVSS score: 9.8), which has been described as an authentication bypass in VMware vCenter.<\/p>\n

\u00abA malicious actor with network access to vCenter may exploit this issue to bypass authentication and gain unauthorized access to the system,\u00bb Broadcom said.<\/p>\n

The second critical flaw is a directory-traversal vulnerability in vCenter (CVE-2026-59310<\/strong>, CVSS score: 9.8) that a malicious actor with network access can exploit to execute arbitrary code. Both vulnerabilities have been addressed in the versions below –<\/p>\n