https://blog.comfidentia.cl/en/tags/vmware/Recent content in VMware on Blog - ComfidentiaHugoenTue, 15 Sep 2026 00:00:00 +0000https://blog.comfidentia.cl/en/2026/09/15/cisa-warns-ransomware-gangs-exploiting-critical-vmware-vcenter-vulnerability/Tue, 15 Sep 2026 00:00:00 +0000https://blog.comfidentia.cl/en/2026/09/15/cisa-warns-ransomware-gangs-exploiting-critical-vmware-vcenter-vulnerability/<p><img alt="VMware logo representing the critical vCenter vulnerability" loading="lazy" src="https://blog.comfidentia.cl/images/posts/cisa-warns-ransomware-gangs-exploiting-critical-vmware-vcent-0-0b0ba765b3.jpg"> <em>Original image source: <a href="https://www.bleepstatic.com/content/hl-images/2024/11/18/VMware.jpg">bleepstatic.com</a></em></p> <p><br></br></p> <p>The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued a warning that ransomware gangs are now actively exploiting a critical VMware vCenter vulnerability, identified as <strong>CVE-2026-59310</strong>, which was patched in July. This development comes after an initial wave of attacks suspected to be from advanced persistent threat (APT) actors.</p> <p><br></br></p> <h2 id="detalles-de-la-vulnerabilidad-y-su-explotación">Detalles de la Vulnerabilidad y su Explotación</h2> <p>Broadcom, the company behind VMware, addressed CVE-2026-59310 on July 29, classifying it as a critical directory traversal flaw within the vCenter Syslog server. This vulnerability allows unauthenticated attackers to execute arbitrary code on affected systems. At the time of the patch release, Broadcom urged customers to prioritize its remediation, emphasizing the urgency of applying updates.</p>