Attackers Exploit VMware vCenter Vulnerability to Gain Persistent Remote Access

Threat actors have begun exploiting a critical security flaw in Broadcom VMware vCenter, according to findings from QUIRSO. The vulnerability, identified as CVE-2026-59310, is a directory-traversal flaw that allows malicious actors with network access to execute arbitrary code.