CVE-2026-59310

Katalog CVE

CVSS 9.8 · Critical KEV · sudah dieksploitasi Dipakai ransomware EPSS 2,6%

Kerentanan Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') pada vmware vcenter server. Skor CVSS 3.1 9.8 (Critical) menurut vmware.com. Masuk katalog KEV CISA pada 18 Agustus 2026, artinya sudah terbukti dieksploitasi. Tercatat dipakai dalam kampanye ransomware.

Deskripsi (NVD)

VMware vCenter contains a directory traversal vulnerability in the Syslog server. A malicious actor with network access to vCenter may exploit this issue to execute arbitrary code.

Advisory KUTIM-CSIRT

• Edge Device Kian Jadi Sasaran: Catatan dari Gelombang Kerentanan Agustus 2026 28 Agt 2026
• Peringatan Keamanan: Kerentanan Kritis CVE-2026-59310 Path Traversal pada VMware vCenter 19 Agt 2026

Rincian

Terbit di NVD

30 Juli 2026

Terakhir diubah

19 Agustus 2026

Status NVD

Analyzed

CVSS 3.1

9.8 (Critical), sumber vmware.com
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

EPSS (30 hari)

2,6% peluang dieksploitasi; lebih tinggi dari 84,7% CVE lain

Known Exploited Vulnerabilities (CISA)

Nama

Broadcom VMware vCenter Path Traversal Vulnerability

Masuk KEV

18 Agustus 2026

Tenggat CISA

21 Agustus 2026 (untuk instansi federal AS)

Ransomware

Tercatat dipakai dalam kampanye ransomware

Tindakan wajib

Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/3801... advisory vendor
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-59310 pemerintah AS
• https://medium.com/@quirso_de/active-exploitation-of-cve-2026-59310-361-victim-ips-across-47-countries-9783187... advisory pihak ketiga
• https://medium.com/@quirso_de/global-exploitation-of-cve-2026-59310-by-suspected-chinese-nexus-apt-related-cve... advisory pihak ketiga