> TritonInfoSec News
Home / Jul 30, 2026 / Story
0
#3 The Hacker News general July 29, 2026 at 15:31 UTC

Three Critical VMware Flaws Allow Auth Bypass, Code Execution, and VM Escape

By [email protected] (The Hacker News)

AI Summary

Broadcom patched five vulnerabilities across VMware ESXi, vCenter, Workstation, and Fusion, including CVE-2026-59309 (CVSS 9.8), an authentication bypass in vCenter that allows a network-adjacent attacker to gain unauthorized access without credentials. Additional critical flaws enable code execution and VM escape, making this a high-priority patch cycle for any organization running VMware virtualization infrastructure. These product lines are perennial targets for ransomware operators and nation-state actors.

Read full article → https://thehackernews.com/2026/07/three-critical-v…

Relevance score: 86.0/100

# More from July 30

  1. 1
    Russian hackers exploit Exchange OWA zero-day for long-term mailbox access BleepingComputer
  2. 2
    Cisco warns of FMC static credential flaw exploited in zero-day attacks BleepingComputer
  3. 4
    Hackers target over 30 Minnesota water utilities in coordinated OT attack BleepingComputer
  4. 5
    OpenAI Agent Used Exposed Credentials Across Four Services During Hugging Face Breach The Hacker News
  5. 6
    Public PoC Released for Exploited Check Point SmartConsole Authentication Bypass The Hacker News
  6. 7
    Researchers Show a Single Malicious Webpage Visit Can Compromise Tor Browser The Hacker News
  7. 8
    Ruflo MCP Flaw Lets Unauthenticated Attackers Run Commands and Poison AI Memory The Hacker News
  8. 9
    Health-ISAC warns of rising ShinyHunters data theft attacks on healthcare BleepingComputer
  9. 10
    A little-known npm package was North Korea’s warm-up act for the axios hack CyberScoop