KEV Entry

CVE-2026-59310

Known Exploited Vulnerability Entry ENISA

Entry Details
Confirmed Exploited

CVE-2026-59310

2026-08-10 00:00 UTC


Timestamps

2026-08-10

2026-08-10


Scope

Affected: VMware / vCenter | Description: Directory traversal vulnerability in the Syslog server. A malicious actor with network access to vCenter may exploit this issue to execute arbitrary code. | Patched since: 2026/08/03 | Exploitation type: APT | CWEs: CWE-22 | Origin source: ENISA | Notes: https://medium.com/@quirso_de/active-exploitation-of-cve-2026-59310-361-victim-ips-across-47-countries-9783187cc6ff


References
  • {'id': 'CVE-2026-59310', 'url': 'https://www.cve.org/CVERecord?id=CVE-2026-59310'}
  • {'id': 'EUVD-2026-51097', 'url': 'https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-51097'}
  • {'id': 'source', 'url': 'https://medium.com/@quirso_de/active-exploitation-of-cve-2026-59310-361-victim-ips-across-47-countries-9783187cc6ff'}

703e3f13-3a5a-48e3-b8cb-eb602bbbe0c2

ENISA
cce329bf-df49-4c6e-a027-80be2e6483bd

2026-08-20 08:12 UTC

2026-08-20 08:12 UTC

Evidence
1
Type Source Signal Confidence Details GCVE Metadata
csirt_report enisa-cnw-kev successful_exploitation 0.75
View details
{
  "catalog": "ENISA / EU CSIRTs Network (CNW) KEV JSON",
  "cwes": [
    "CWE-22"
  ],
  "dateReported": "2026/08/10",
  "euvd": "EUVD-2026-51097",
  "exploitationType": [
    "APT"
  ],
  "notes": "https://medium.com/@quirso_de/active-exploitation-of-cve-2026-59310-361-victim-ips-across-47-countries-9783187cc6ff",
  "originSource": "ENISA",
  "patchedSince": "2026/08/03",
  "product": "vCenter",
  "threatActorsExploiting": [],
  "vendorProject": "VMware",
  "vulnerabilityName": ""
}
-