Advisories · Technology

VMware vCenter.

Every CVE that names VMware vCenter among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-59309 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

vCenter authentication-bypass vulnerability
- VMware Cloud Foundation
- VMware vSphere Foundation
- Authentication bypass
Not analysed yet 30 Jul 2026
CVE-2026-59310 CVE record

CVSS 9.8 CriticalCritical · KEV, CVSS 9+KEV · ransomware

vCenter directory-traversal vulnerability
- VMware Cloud Foundation
- VMware vSphere Foundation
- Path traversal
Not analysed yet 30 Jul 2026
CVE-2025-41250 CVE record

CVSS 8.5 High

Header injection vulnerability
- VMware vCenter
- VMware Cloud Foundation
- Command injection
Not analysed yet 29 Sept 2025
CVE-2025-41241 CVE record

CVSS 4.4 Medium

Denial-of-service vulnerability
- VMware vCenter
- VMware Cloud Foundation
- CWE-754
Not analysed yet 29 Jul 2025