VMware vCenter vulnerabilities

4 published CVEs name VMware vCenter among the affected products; CISA lists 1 of them as exploited in the wild.

All 4 in the list Atom feed of new CVEs

Published CVEs: 4
Last 12 months: 2
Critical: 2
Known exploited: 1

Critical 2High 1Medium 1Low 0Not scored 0

CVEs per yearBy the year they were published

20252
20262

Known exploitedNewest addition to KEV first

CVE-2026-59310
vCenter directory-traversal vulnerability
VMware · Cloud Foundation
ExploitedCritical9.8

Newest CVEs

CVE-2026-59309
vCenter authentication-bypass vulnerability
VMware · Cloud Foundation
Critical9.8
CVE-2026-59310
vCenter directory-traversal vulnerability
VMware · Cloud Foundation
ExploitedCritical9.8
CVE-2025-41250
Header injection vulnerability
VMware · vCenter
High8.5
CVE-2025-41241
Denial-of-service vulnerability
VMware · vCenter
Medium4.4

Most common weaknesses