VMware Security Updates – 29 July 2026

The addressed vulnerabilities could allow the attacker to bypass security restrictions, obtain sensitive information, perform directory traversal and denialof- service attacks, execute arbitrary code, and gain access to the affected products.

Sample of the addressed vulnerabilities:

1. VMware vCenter Authentication Bypass Vulnerability (CVE-2026-59309):

• CVSS: 9.8
• Attack Vector: Network
• Attack Complexity: Low
• Privileges Required: None
• User Interaction: None
• Consequences: Bypass Security

2. VMware vCenter Directory Traversal Vulnerability (CVE-2026-59310):

• CVSS: 9.8
• Attack Vector: Network
• Attack Complexity: Low
• Privileges Required: None
• User Interaction: None
• Consequences: Remote Code Execution

The affected products:

• VMware ESX.
• VMware vCenter.
• VMware Workstation.
• VMware Fusion.
• VMware Cloud Foundation.
• VMware vSphere Foundation.
• VMware Telco Cloud Platform.
• VMware Telco Cloud Infrastructure.