Multiple Vulnerabilities in VMware Products

THREAT INTELLIGENCE

Peer Review

4.8

Proven Trust

Dark blue circle with two overlapping checkmarks, one green and one light blue.

ISO 27001 text with a globe outline symbol on a black background.

2025 winner badge for Cyber Security Excellence Awards with gold and black design.

Critical

VMware/Broadcom

July 29, 2026

Executive Summary

Five vulnerabilities including a critical vCenter authentication bypass and directory traversal flaw enabling full system compromise.

Key Details

Affected Platform

VMware

Attack Surface

Recommended Action

Apply vendor patch

Affected Environment

VMware ESX, vCenter, Workstation, Fusion, Cloud Foundation, vSphere Foundation, Telco Cloud Platform, and Telco Cloud Infrastructure deployments.

Operational Impact

Unauthorized vCenter access, arbitrary code execution, information disclosure, or denial of service across virtualized production environments.

Technical Root Cause

Authentication bypass in VMware Directory Service and unchecked directory traversal in the Syslog server component.

Recommended Mitigation

Upgrade all affected VMware products to fixed versions immediately; prioritize vCenter, ESXi, Cloud Foundation, and Telco platforms.

Concerned about your exposure?

Our security experts can help you assess affected systems, validate risk and support a safe remediation plan.

Discuss Your Security Exposure Explore Managed Detection and Response

Assess your risk

Identify affected systems

Plan remediation

Practical, vendor-aligned guidance

Get expert support

From our 24/7 security team

Stay ahead of emerging threats

Get the latest threat intelligence and security advisories from Smarttech247.

Full Technical Report

Download the complete analysis, including detailed technical findings and references.

Download Full Report (PDF)

References

Broadcom Security Advisory