{"id":"CVE-2026-59309","published":"2026-07-30T12:19:52Z","modified":"2026-07-30T15:08:05Z","title":"vCenter authentication-bypass vulnerability","vendor":"VMware","product":"Cloud Foundation","tier":"core","eol":null,"affectedVersions":[{"vendor":"VMware","product":"Cloud Foundation","versions":["9.1.x.x","9.0.x.x","5.x"]},{"vendor":"VMware","product":"vSphere Foundation","versions":["9.1.x.x","9.0.x.x"]},{"vendor":"VMware","product":"vCenter","versions":[">= 9.1.x.x, < 9.1.0.0300",">= 9.0.x.x, < 9.0.2.0100",">= 8.0, < 8.0 U3k"]},{"vendor":"VMware","product":"Telco Cloud Infrastructure","versions":["3.0"]},{"vendor":"VMware","product":"Telco Cloud Platform","versions":["5.1.x","5.0.x","4.x","3.0"]}],"description":{"text":"VMware vCenter contains an authentication bypass vulnerability in the VMware Directory Service. A malicious actor with network access to vCenter may exploit this issue to bypass authentication and gain unauthorized access to the system.","provenance":"source","from":"CVE.org"},"summary":{"text":"VMware Cloud Foundation contains an authentication bypass flaw in the VMware Directory Service component of VMware vCenter. An attacker with network access to vCenter can exploit it to bypass authentication and gain unauthorized access to the system, with no credentials or user interaction required.","provenance":"ai","model":"claude-haiku-5-5","generatedAt":"2026-10-31T22:22:25Z"},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","provenance":"source","from":"CVE.org CNA"},"epss":{"score":0.00611,"percentile":0.49255,"date":"2026-10-31","provenance":"source"},"kev":null,"vulncheckKev":{"dateAdded":"2026-08-14","exploitedFirstSeen":"2026-08-14","ransomware":false,"evidence":[{"url":"https://medium.com/@quirso_de/global-exploitation-of-cve-2026-59310-by-suspected-chinese-nexus-apt-related-cve-2026-59309-443a79e1466d","date":"2026-08-14"}],"evidenceTotal":1,"provenance":"source"},"exploited":true,"otx":null,"cwes":[{"id":"CWE-303","name":"Incorrect Implementation of Authentication Algorithm"}],"references":[{"url":"https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/38017","tags":[]}],"techniques":[],"reports":[],"affected":[],"advisories":[],"euvd":{"id":"EUVD-2026-51098","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-51098","exploited":false,"exploitedSince":null,"provenance":"source"},"exploits":[],"exploitSources":null,"exploitRefs":[],"flow":[],"timeline":[{"date":"2026-07-30","kind":"published","label":"Published (CVE.org)","url":"https://www.cve.org/CVERecord?id=CVE-2026-59309","provenance":"source"},{"date":"2026-08-14","kind":"exploited-reported","label":"Exploitation first reported (VulnCheck KEV evidence)","url":"https://medium.com/@quirso_de/global-exploitation-of-cve-2026-59310-by-suspected-chinese-nexus-apt-related-cve-2026-59309-443a79e1466d","provenance":"source"}],"speed":{"daysToPublicExploit":null,"firstExploitFrom":null,"daysToKev":null},"priority":{"score":61.7,"factors":[{"name":"In a KEV catalog","points":35.0,"detail":"listed in VulnCheck KEV"},{"name":"Recent KEV listing","points":10.0,"detail":"added 79 days ago"},{"name":"Known ransomware use","points":0.0,"detail":"not known"},{"name":"EPSS percentile","points":9.85,"detail":"percentile 0.4925"},{"name":"Named in threat reports","points":0.0,"detail":"0 reports"},{"name":"Public exploit code","points":0.0,"detail":"none found"},{"name":"Mentioned in OTX pulses","points":0.0,"detail":"0 pulses"},{"name":"CVSS severity","points":6.86,"detail":"base score 9.8"},{"name":"End-of-life product","points":0.0,"detail":"supported or unknown"}]}}