EP. 145: VMware vCenter Under Attack: CVE-2026-59310 Enables Persistent Access

The Digital Warfare Podcast · Aug 13, 2026 · 4m · transcript

Summary

CVE-2026-59310 is a critical directory traversal vulnerability in VMware vCenter Server’s Syslog component that can allow a remote attacker with network access to execute arbitrary code. Broadcom rates the flaw CVSS 9.8 and provides no workaround, making patching the required remediation.

Active exploitation began shortly after the July 29 disclosure. More than 360 compromised IP addresses were subsequently observed across 47 countries, with attackers deploying the open-source reverse_ssh framework to establish persistent outbound command-and-control access.

Organizations should patch…