Attackers Exploit VMware vCenter Vulnerability to Gain Persistent Remote Access

🗓️ 12 Aug 2026 09:01:00Reported by The Hacker NewsType

thn🔗 thehackernews.com👁 34 Views

CVE-2026-59310 directory-traversal in VMware vCenter enables RCE and APT persistence via cron jobs.

Reporter	Title	Published	Views	Family All 41
GithubExploit	Exploit for CVE-2026-59310	17 Aug 202607:51	–	githubexploit
GithubExploit	Exploit for Path Traversal in Vmware Vcenter_Server	29 Sep 202601:54	–	githubexploit
GithubExploit	Exploit for Path Traversal in Vmware Vcenter_Server	25 Sep 202616:05	–	githubexploit
GithubExploit	GraySentinel-DSOU-45Day-2026	9 Sep 202614:35	–	githubexploit
GithubExploit	Exploit for Incorrect Implementation of Authentication Algorithm in Vmware Vcenter_Server	1 Oct 202601:29	–	githubexploit
attackerkb	CVE-2026-59309	30 Jul 202612:19	–	attackerkb
attackerkb	CVE-2026-59310	30 Jul 202612:19	–	attackerkb
BDU FSTEC	The vulnerability of the Syslog Server server, a management tool for virtual infrastructure in VMware vCenter Server, allows a attacker to execute arbitrary code.	10 Aug 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the VMware Directory Service, a component of the VMware vCenter Server virtualization infrastructure management tool, allows an attacker to gain unauthorized access to protected information.	10 Aug 202600:00	–	bdu_fstec
IBM Security Bulletins	Security Bulletin: Due to use of VMware ESXi and vCenter, IBM Cloud Pak System is affected by multiple vulnerabilities.	1 Oct 202609:03	–	ibm

12 Aug 2026 16:41Current

8.7High risk

Vulners AI Score8.7

CVSS 3.19.8

EPSS0.02565

SSVC

CVE-2026-59310 VMware vCenter Directory Traversal Remote Code Execution APT Reverse SSH Cron Job Persistence