Threat Intelligence Report

Critical VMware vCenter Vulnerabilities Allow Authentication Bypass and Remote Code Execution (CVE-2026-59309, CVE-2026-59310)

📅 July 30, 2026 📰 www.rapid7.com 🔍 2 CVE(s) referenced

Two critical vulnerabilities in VMware vCenter Server (CVE-2026-59309 and CVE-2026-59310) allow unauthenticated attackers with network access to bypass authentication and execute remote code, making urgent patching essential to prevent potential compromise of virtualized environments.

vendor

CVE-2026-59310, CVE-2026-59309

🔐 Sign In to Read Full Report

You'll need to accept our Terms of Service to access the platform.

📊 Visual Mindmap

🎯 IOC Extraction

⚔️ MITRE ATT&CK TTPs

📦 STIX 2.1 Bundle