critical9.8
CVE-2026-59309
VMware vCenter contains an authentication bypass vulnerability in the VMware Directory Service.
Impact
VMware vCenter contains an authentication bypass vulnerability in the VMware Directory Service. A malicious actor with network access to vCenter may exploit this issue to bypass authentication and gain unauthorized access to the system.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Vmware | Vcenter Server | before 8.0 from 9.0 before 9.0.2.0100 from 9.1 before 9.1.0.0300 Version 8.0 |