Vcenter (Vmware) - vulnerabilities (CVEs)

5 CVEs, 0 in the last 30 days, 5 known versions, newest CVE from 2026-07-30. Vendor: Vmware.

CVEs of Vcenter

• CVE-2026-59309 - CVSS 9.8 (critical), 2026-07-30: VMware vCenter contains an authentication bypass vulnerability in the VMware Directory Service. A malicious actor with network access to vCenter may exploit…
• CVE-2026-59310 - CVSS 9.8 (critical), 2026-07-30: VMware vCenter contains a directory traversal vulnerability in the Syslog server. A malicious actor with network access to vCenter may exploit this issue to…
• CVE-2025-41250 - CVSS 8.5 (high), 2025-09-29: VMware vCenter contains an SMTP header injection vulnerability. A malicious actor with non-administrative privileges on vCenter who has permission to create…
• CVE-2025-41241 - CVSS 4.4 (medium), 2025-07-29: VMware vCenter contains a denial-of-service vulnerability. A malicious actor who is authenticated through vCenter and has permission to perform API calls for…
• CVE-2011-1788 - CVSS 2.1 (low), 2011-05-09: vCenter Server in VMware vCenter 4.0 before Update 3 and 4.1 before Update 1 allows local users to discover the SOAP session ID via unspecified vectors.
• CVE-2011-1789 - CVSS 5 (medium), 2011-05-09: The self-extracting installer in the vSphere Client Installer package in VMware vCenter 4.0 before Update 3 and 4.1 before Update 1, VMware ESXi 4.x before…
• CVE-2011-0426 - CVSS 4.3 (medium), 2011-05-09: Directory traversal vulnerability in vCenter Server in VMware vCenter 4.0 before Update 3 and 4.1 before Update 1, and VMware VirtualCenter 2.5 before Update…
• CVE-2009-3731 - CVSS 4.3 (medium), 2009-12-16: Multiple cross-site scripting (XSS) vulnerabilities in WebWorks Help 2.0 through 5.0 in VMware vCenter 4.0 before Update 1 Build 208156; VMware Server 2.0.2;…
• CVE-2009-0778 - CVSS 7.1 (high), 2009-03-12: The icmp_send function in net/ipv4/icmp.c in the Linux kernel before 2.6.25, when configured as a router with a REJECT route, does not properly manage the…