CVE-2026-59309

9.8 Critique

Publiée le 30/07/2026 à 15:16 · Modifiée le 25/08/2026 à 20:12 · Analysée par le NVD · Source : security@vmware.com

Description

VMware vCenter contains an authentication bypass vulnerability in the VMware Directory Service. A malicious actor with network access to vCenter may exploit this issue to bypass authentication and gain unauthorized access to the system.

Traduire en français

Produits concernés

VMware Cloud Foundation
VMware vSphere Foundation
VMware vCenter
VMware Telco Cloud Infrastructure
VMware Telco Cloud Platform
Vmware vcenter server

Scores CVSS

Version	Score	Source	Vecteur
3.1	9.8 Critique	security@vmware.com	`CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H`

Faiblesses (CWE)

CWE-303

Références

https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/38017 Vendor Advisory

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories