CVE-2026-59310 CISA KEV · Actively exploitedLinked to ransomwareSuited to automated attack · CISA
vCenter directory-traversal vulnerability
CVSS score
9.8
EPSS probability
%2.6
Risk score
0.5
Published
2 mo ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
GitHub
ChinaRan0/CVE-2026-59310-POC 的优化版本。子命令、一次性 cron、带远端 PTY 的交互 shell。仅限授权测试。
Makefile Go / Python
GitHub
VC-Strike — VMware vCenter CVE-2026-59310 (unauth root RCE) & CVE-2026-59309 (SRP auth bypass) authorized pentest suite. GUI+CLI, multi-session C2, stdlib-only. 授权测试专用
Makefile Go / Python
Similar Vulnerabilities
9.8
CVE-2021-21985 Actively exploited
Vulnerability in N/a VMware vCenter Server And VMware Cloud Foundation
N
Workaround Public Exploits:10EPSS %100
9.8
CVE-2021-21972 Actively exploited
Vulnerability in N/a VMware vCenter Server
N
Workaround Public Exploits:11EPSS %100
9.8
CVE-2018-1273 Actively exploited
Code injection in Spring By Pivotal Spring Framework
SB
Patch verified Public Exploits:8EPSS %97
9.0
CVE-2021-40438 Actively exploited
mod_proxy SSRF
AS
Patch verified Public Exploits:11EPSS %100
9.8
CVE-2020-3992 Actively exploited
Vulnerability in N/a VMware ESXi
N
Patch verified Public Exploits:1EPSS %83
8.1
CVE-2022-22965 Actively exploited
spring-framework: RCE via Data Binding on JDK 9+
RH
Partial patch Public Exploits:8EPSS %100
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-59310"