A directory traversal flaw in the VMware vCenter Syslog server. NVD scores it 9.8 (Critical, CVSS 3.1) and its description states that a malicious actor with network access to vCenter may exploit it to execute arbitrary code.

Virtualisation and platform teams should treat the patch as an emergency change: vCenter is the management plane for an entire virtual estate, so root-level access from a network-reachable endpoint converts directly into control of every guest it hosts and the snapshots and backups they depend on. Ransomware operators have consistently treated hypervisor management as a force multiplier — control of vCenter is what allows a victim's recovery copies to be destroyed rather than merely encrypted — so verify no instance is reachable from an untrusted network while the fix is outstanding.

• NVD record — CVE-2026-59310