CVE-2026-59309
CRITICAL
CVSS 9.8
cloud_foundation
Verified Advisory
Authentication bypass in VMware vCenter Directory Service (CVE-2026-59309)
Authentication Bypass
VMware
Cloud Foundation
Telco Cloud Infrastructure
Telco Cloud Platform
Vcenter
Vsphere Foundation
VMware vCenter contains an authentication bypass vulnerability in the VMware Directory Service. A malicious actor with network access to vCenter may exploit this issue to bypass authentication and gain unauthorized access to the system. The vulnerability has been assigned a CVSSv3 base score of 9.8 (Critical).
Affected versions:
- 9.1.x.x
- 9.0.x.x
- 8.0
We recommend updating to: 9.1.0.0300, 9.0.2.0100, 8.0 U3k.
CVSS 9.8 · our assessment: act_now
Reference: https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/38017
Details: https://vuln.today/cve/CVE-2026-59309
Verified by vuln.today against published advisories.
Affected versions
- – 9.1.x.x
- – 9.0.x.x
- – 8.0
Fixed in: 9.1.0.0300; 9.0.2.0100; 8.0 U3k