CERT24Attackers Exploit VMware vCenter Vulnerability to Gain Persistent Remote AccessLoading data…
CERT24Threat Observatory
Period

Attackers Exploit VMware vCenter Vulnerability to Gain Persistent Remote Access

Attackers are actively exploiting the recently patched critical vulnerability CVE-2026-59310 in Broadcom VMware vCenter to gain remote access and establish persistence. QUIRSO identified up to 361 victim IP addresses across 47 countries, including Germany, the United States, Turkey, Iran, and France.

← Back to intelligence

Attackers Exploit VMware vCenter Vulnerability to Gain Persistent Remote Access

Attackers are actively exploiting the recently patched critical vulnerability CVE-2026-59310 in Broadcom VMware vCenter to gain remote access and establish persistence. QUIRSO identified up to 361 victim IP addresses across 47 countries, including Germany, the United States, Turkey, Iran, and France.