Critical Alert 4 Active Exploits Detected Today

CVE-2026-84869 — ConnectWise ScreenConnect Improper Privilege Management and Missing Authorization Vulnerability →
CVE-2026-42016 — JFrog Artifactory Incorrect Authorization Vulnerability →
CVE-2026-42018 — JFrog Artifactory Improper Authentication Vulnerability →
CVE-2026-85706 — GitLab Community Edition and Enterprise Edition Path Traversal Vulnerability →
Powered by CVE Watchtower
×
September 13, 2026

CVE Watchtower


← Back to CVE List

CVE-2026-59310NVD

Vulnerability Summary

VMware vCenter contains a directory traversal vulnerability in the Syslog server. A malicious actor with network access to vCenter may exploit this issue to execute arbitrary code.
Severity Level
CRITICAL(9.8)
Published Date
Jul 30, 2026
Last Modified
Aug 19, 2026
Exploitation Status
ACTIVE
EPSS Score (30-Day)
45.88%Probability
Root Weakness (CWE)
CWE-22: Path Traversal ↗
The software uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory.
CVSS v3.1 Base Metrics
Attack VectorNetwork
Attack ComplexityLow
Privileges RequiredNone
User InteractionNone
ScopeUnchanged
ConfidentialityHigh
IntegrityHigh
AvailabilityHigh

External References