bleeping-computer Jul 30, 2026 · Crawled Jul 30, 2026

VMware fixes three critical flaws allowing auth bypass, VM escapes

1 Malware

AI Summary

VMware, now under Broadcom, has released emergency security updates to address five vulnerabilities in vCenter, ESX, Workstation, and Fusion, including three critical flaws. CVE-2026-59309 and CVE-2026-59310 are critical authentication bypass and arbitrary code execution vulnerabilities in vCenter that can be exploited by unauthenticated attackers with network access. CVE-2026-47876 is a critical VM escape vulnerability in the VMXNET3 virtual network adapter, allowing a guest VM attacker with local admin privileges to execute code on the host. While there is no evidence of active exploitation, VMware servers are high-value targets for ransomware and advanced threat actors, and these flaws could enable broad lateral movement and persistence if left unpatched.

AI-extracted · verify before operational use

Extracted Entities 1 found

Malware BRICKSTORM →

MITRE ATT&CK TTPs 7 techniques

T1059 Command and Scripting Interpreter · Execution T1068 Exploitation for Privilege Escalation · Privilege Escalation T1078 Valid Accounts · Defense Evasion T1082 System Information Discovery · Discovery T1133 External Remote Services · Persistence T1484 Domain or Tenant Policy Modification · Defense Evasion T1490 Inhibit System Recovery · Impact