Attackers Exploit VMware vCenter Vulnerability to Gain Persistent Remote Access

Threat actors are actively exploiting a critical security flaw in VMware vCenter, a vulnerability that allows them to gain persistent remote access. The flaw, which has a CVSS score of 9.8, is a directory-traversal vulnerability that can be exploited by a malicious actor with network access to execute arbitrary code. Patches for the vulnerability, identified as CVE-2026-59310, have been released by Broadcom. The exploitation of this vulnerability was discovered by QUIRSO, which has been tracking the activity of threat actors.