Description
VMware vCenter contains a directory traversal vulnerability in the Syslog server. A malicious actor with network access to vCenter may exploit this issue to execute arbitrary code.
CVSS breakdown
CVSS 3.1
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
Affected products
- VMware / Cloud Foundation9.0.x.x – 9.0.x.x
- VMware / Cloud Foundation5.x – 5.x
- VMware / Cloud Foundation9.1.x.x – 9.1.x.x
- VMware / Telco Cloud Infrastructure3.0 – 3.0
- VMware / Telco Cloud Platform4.x – 4.x
- VMware / Telco Cloud Platform3.0 – 3.0
- VMware / Telco Cloud Platform5.1.x – 5.1.x
- VMware / Telco Cloud Platform5.0.x – 5.0.x
- VMware / vCenter9.1.x.x – 9.1.0.0300
- VMware / vCenter9.0.x.x – 9.0.2.0100
- VMware / vCenter8.0 – 8.0 U3k
- VMware / vCenter Server8.0 – 8.0
- VMware / vCenter Server8.0 – 8.0
- VMware / vCenter Server8.0 – 8.0
- VMware / vCenter Server8.0
- VMware / vCenter Server8.0 – 8.0
- VMware / vCenter Server8.0 – 8.0
- VMware / vCenter Server8.0 – 8.0
- VMware / vCenter Server8.0 – 8.0
- VMware / vCenter Server8.0 – 8.0
- VMware / vCenter Server8.0 – 8.0
- VMware / vCenter Server8.0 – 8.0
- VMware / vCenter Server8.0 – 8.0
- VMware / vCenter Server8.0 – 8.0
- VMware / vCenter Server8.0 – 8.0
- VMware / vCenter Server8.0 – 8.0
- VMware / vCenter Server8.0 – 8.0
- VMware / vCenter Server8.0 – 8.0
- VMware / vCenter Server8.0 – 8.0
- VMware / vCenter Server8.0 – 8.0
- VMware / vCenter Server8.0 – 8.0
- VMware / vCenter Server8.0 – 8.0
- VMware / vCenter Server8.0 – 8.0
- VMware / vCenter Server8.0 – 8.0
- VMware / vCenter Server8.0 – 8.0
- VMware / vCenter Server8.0 – 8.0
- VMware / vCenter Server8.0 – 8.0
- VMware / vCenter Server8.0 – 8.0
- VMware / vSphere Foundation9.0.x.x – 9.0.x.x
- VMware / vSphere Foundation9.1.x.x – 9.1.x.x
News coverage
- Suspected China-Nexus Actor Exploits VMware vCenter Flaw, Deploys Babuk-Derived RansomwareThe Hacker News · 8/17/2026
- Critical VMware vCenter RCE flaw exploited for reverse SSH accessBleepingComputer · 8/13/2026
- Attackers Exploit VMware vCenter Vulnerability to Gain Persistent Remote AccessThe Hacker News · 8/12/2026
Updated 9m ago · 8 sources