CVE-2026-59309

No fix known EPSS <1%CVSS 9.8

VMware vCenter contains an authentication bypass vulnerability in the VMware Directory Service. A malicious actor with network access to vCenter may exploit this issue to bypass authentication and gain unauthorized access to the system.

Published 2026-07-30 · CVE record · OSV

Products: vmware cloud_foundation, VMware vSphere Foundation, VMware vCenter, VMware Telco Cloud Infrastructure, VMware Telco Cloud Platform