CVE-2026-59309

EUVD-2026-51098
VMware vCenter contains an authentication bypass vulnerability in the VMware Directory Service. A malicious actor with network access to vCenter may exploit this issue to bypass authentication and gain unauthorized access to the system.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
9.8 CRITICAL
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 94.4%
Affected Products (NVD)
VendorProductVersion
vmwarevcenter_server
𝑥
< 8.0
vmwarevcenter_server
8.0
vmwarevcenter_server
8.0:a
vmwarevcenter_server
8.0:b
vmwarevcenter_server
8.0:c
vmwarevcenter_server
8.0:update1
vmwarevcenter_server
8.0:update1a
vmwarevcenter_server
8.0:update1b
vmwarevcenter_server
8.0:update1c
vmwarevcenter_server
8.0:update1d
vmwarevcenter_server
8.0:update1e
vmwarevcenter_server
8.0:update2
vmwarevcenter_server
8.0:update2a
vmwarevcenter_server
8.0:update2b
vmwarevcenter_server
8.0:update2c
vmwarevcenter_server
8.0:update2d
vmwarevcenter_server
8.0:update2e
vmwarevcenter_server
8.0:update3
vmwarevcenter_server
8.0:update3a
vmwarevcenter_server
8.0:update3b
vmwarevcenter_server
8.0:update3c
vmwarevcenter_server
8.0:update3d
vmwarevcenter_server
8.0:update3e
vmwarevcenter_server
8.0:update3g
vmwarevcenter_server
8.0:update3h
vmwarevcenter_server
8.0:update3i
vmwarevcenter_server
8.0:update3j
vmwarevcenter_server
9.0 ≤
𝑥
< 9.0.2.0100
vmwarevcenter_server
9.1 ≤
𝑥
< 9.1.0.0300
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/38017