Attackers Exploit VMware vCenter Vulnerability to Gain Persistent Remote Access

Threat actors are actively exploiting CVE-2026-59310, a critical directory-traversal vulnerability in Broadcom VMware vCenter with a CVSS score of 9.8. QUIRSO reported the flaw allows network-based attackers to execute arbitrary code. Patches were released, but exploitation is ongoing, posing a persistent remote access risk to unpatched systems. Organizations are urged to apply updates immediately to prevent compromise.