CVE-2026-59309
Received Received - Intake

Authentication Bypass in VMware vCenter

Publication date: 2026-07-30

Last updated on: 2026-07-30

Assigner: VMware

Description
VMware vCenter contains an authentication bypass vulnerability in the VMware Directory Service. A malicious actor with network access to vCenter may exploit this issue to bypass authentication and gain unauthorized access to the system.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-07-30
Last Modified
2026-07-30
Generated
2026-07-30
AI Q&A
2026-07-30
EPSS Evaluated
N/A
NVD
CVE-2026-59309
EUVD
EUVD-2026-51098

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
vmware vcenter *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-303 The requirements for the product dictate the use of an established authentication algorithm, but the implementation of the algorithm is incorrect.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

VMware vCenter has an authentication bypass vulnerability in its VMware Directory Service. This allows a remote attacker with network access to vCenter to bypass authentication mechanisms and gain unauthorized access to the system without valid credentials.

Impact Analysis

This vulnerability could allow attackers to take full control of your vCenter environment, potentially leading to unauthorized access to virtual machines, data theft, or disruption of services. The high CVSS score indicates a critical risk.

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive data, violating compliance requirements under GDPR, HIPAA, and other regulations. Organizations may face legal penalties, data breach notifications, and reputational damage.

Mitigation Strategies

Apply the latest security patches from VMware immediately to address the authentication bypass vulnerability in the VMware Directory Service.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-59309. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart