CVE-2026-59309

VMware vCenter contains an authentication bypass vulnerability in the VMware Directory Service. A malicious actor with network access to vCenter may exploit this issue to bypass authentication and gain unauthorized access to the system.

Score

CVSS 3.1 9.8 Critical

Status

Analyzed - security@vmware.com

Published

2026-07-30

Last modified

2026-07-30

Weaknesses

CWE-303

Affected products

• Cloud Foundation (Vmware)
• Telco Cloud Infrastructure (Vmware)
• Telco Cloud Platform (Vmware)
• Vcenter (Vmware)
• Vcenter Server (Vmware)
• Vsphere Foundation (Vmware)

References

• https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/38017