AI Sec Watch: A Security Intelligence Platform for AI Systems

Luu, T.J.

🔥 This vulnerability is being actively exploited in the wild (CISA Known Exploited Vulnerabilities catalog)

CVE-2026-59310: Broadcom VMware vCenter Path Traversal Vulnerability

infovulnerability🔥 Actively Exploited

security

Source: CISA Known Exploited VulnerabilitiesAugust 17, 2026CVE-2026-59310

Summary

Broadcom VMware vCenter has a path traversal vulnerability (a flaw that lets attackers access files outside their intended directory), which allows someone with network access to run arbitrary code (execute any commands) on the affected system. This vulnerability is currently being actively exploited by attackers in the wild.

Solution / Mitigation

Apply mitigations in accordance with vendor instructions from Broadcom's security advisory at https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/38017, ensuring compliance with CISA's BOD 26-04 guidance. If mitigations are unavailable, discontinue use of the product.

Vulnerability Details

EPSS (30-day exploit probability)

EPSS: 1.1%

Patch Available

Yes

Exploit Maturity

🔥 Actively Exploited

Disclosure Date

August 17, 2026

Classification

Attack SophisticationModerate

Taxonomy References

CWE (Weakness Type)

CWE-22

CAPEC (Attack Pattern)

CAPEC-126

Monthly digest — independent AI security research

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-59310

First tracked: August 18, 2026 at 02:01 PM

Classified by LLM (prompt v3) · confidence: 95%