Broadcom VMware vCenter Path Traversal Vulnerability Added to CISA KEV List

## Overview CISA added CVE-2026-59310 to its Known Exploited Vulnerabilities (KEV) list on August 18, 2026. This vulnerability affects VMware vCenter and is classified with a CVSS score of 9.8. The addition to the KEV list indicates a federal deadline for remediation, highlighting the urgency of addressing this issue. ## Technical Details The vulnerability is a directory traversal flaw in the Syslog server of VMware vCenter. A threat actor with network access can exploit this vulnerability to execute arbitrary code on the affected system. The exploitation evidence suggests that attackers are actively targeting this weakness, which raises concerns about the potential for widespread attacks. ## Impact Successful exploitation of CVE-2026-59310 could lead to unauthorized access and control over the vCenter environment. This could allow attackers to manipulate virtual machines, disrupt services, or exfiltrate sensitive data. Given the critical nature of vCenter in managing virtualized environments, the impact could be severe for organizations relying on this software. ## Mitigation Defenders should prioritize applying patches released by Broadcom for VMware vCenter. Organizations should also review their network access controls to limit exposure to the Syslog server. Regular monitoring for unusual activity and implementing intrusion detection systems can help identify potential exploitation attempts.