{"schema":"vulnpedia.research/1","cve":"CVE-2026-59310","references":[{"url":"https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/38017","tags":["Vendor Advisory"],"source":"mitre","sourceId":"vmware","modified":"2026-07-30T12:28:20.696Z","origins":[{"source":"mitre","sourceId":"vmware","modified":"2026-07-30T12:28:20.696Z","url":"https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/38017"},{"source":"nvd","sourceId":"CVE-2026-59310","modified":"2026-08-19T04:17:24.940","url":"https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/38017"}]},{"url":"https://medium.com/@quirso_de/global-exploitation-of-cve-2026-59310-by-suspected-chinese-nexus-apt-related-cve-2026-59309-443a79e1466d","tags":["third-party-advisory","Third Party Advisory","KEV report"],"source":"mitre","sourceId":"CISA-ADP","modified":"2026-09-12T03:55:18.047Z","origins":[{"source":"mitre","sourceId":"CISA-ADP","modified":"2026-09-12T03:55:18.047Z","url":"https://medium.com/@quirso_de/global-exploitation-of-cve-2026-59310-by-suspected-chinese-nexus-apt-related-cve-2026-59309-443a79e1466d"},{"source":"nvd","sourceId":"CVE-2026-59310","modified":"2026-08-19T04:17:24.940","url":"https://medium.com/@quirso_de/global-exploitation-of-cve-2026-59310-by-suspected-chinese-nexus-apt-related-cve-2026-59309-443a79e1466d"},{"source":"vulncheck-kev","sourceId":"CVE-2026-59310","modified":"2026-08-10T00:00:00Z","url":"https://medium.com/@quirso_de/global-exploitation-of-cve-2026-59310-by-suspected-chinese-nexus-apt-related-cve-2026-59309-443a79e1466d"}]},{"url":"https://medium.com/@quirso_de/active-exploitation-of-cve-2026-59310-361-victim-ips-across-47-countries-9783187cc6ff","tags":["third-party-advisory","Third Party Advisory","KEV report"],"source":"mitre","sourceId":"CISA-ADP","modified":"2026-09-12T03:55:18.047Z","origins":[{"source":"mitre","sourceId":"CISA-ADP","modified":"2026-09-12T03:55:18.047Z","url":"https://medium.com/@quirso_de/active-exploitation-of-cve-2026-59310-361-victim-ips-across-47-countries-9783187cc6ff"},{"source":"nvd","sourceId":"CVE-2026-59310","modified":"2026-08-19T04:17:24.940","url":"https://medium.com/@quirso_de/active-exploitation-of-cve-2026-59310-361-victim-ips-across-47-countries-9783187cc6ff"},{"source":"vulncheck-kev","sourceId":"CVE-2026-59310","modified":"2026-08-10T00:00:00Z","url":"https://medium.com/@quirso_de/active-exploitation-of-cve-2026-59310-361-victim-ips-across-47-countries-9783187cc6ff"}]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-59310","tags":["government-resource","US Government Resource"],"source":"mitre","sourceId":"CISA-ADP","modified":"2026-09-12T03:55:18.047Z","origins":[{"source":"mitre","sourceId":"CISA-ADP","modified":"2026-09-12T03:55:18.047Z","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-59310"},{"source":"nvd","sourceId":"CVE-2026-59310","modified":"2026-08-19T04:17:24.940","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-59310"}]},{"source":"euvd","sourceId":"EUVD-2026-51097","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-51097","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2026-51097","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-51097"}]},{"url":"https://vulncheck.com/kev","tags":["ADVISORY"],"source":"vulncheck-kev","sourceId":"CVE-2026-59310","modified":"2026-08-10T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-59310","modified":"2026-08-10T00:00:00Z","url":"https://vulncheck.com/kev"}]},{"url":"https://previdian.com/CVE-2026-59310","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-59310","modified":"2026-08-10T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-59310","modified":"2026-08-10T00:00:00Z","url":"https://previdian.com/CVE-2026-59310"}]},{"url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-59310","modified":"2026-08-10T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-59310","modified":"2026-08-10T00:00:00Z","url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json"}]},{"url":"https://cydome.io/maritime-cybersecurity-bulletin-august-21st-2026/","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-59310","modified":"2026-08-10T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-59310","modified":"2026-08-10T00:00:00Z","url":"https://cydome.io/maritime-cybersecurity-bulletin-august-21st-2026/"}]},{"url":"https://www.recordedfuture.com/blog/august-2026-cve-landscape","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-59310","modified":"2026-08-10T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-59310","modified":"2026-08-10T00:00:00Z","url":"https://www.recordedfuture.com/blog/august-2026-cve-landscape"}]},{"url":"https://vulncheck.com/xdb/38c0a8d7dd2f","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"38c0a8d7dd2f","modified":"2026-08-10T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"38c0a8d7dd2f","modified":"2026-08-10T00:00:00Z","url":"https://vulncheck.com/xdb/38c0a8d7dd2f"}]},{"url":"https://github.com/BiuTrap/CVE-2026-59310","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"38c0a8d7dd2f","modified":"2026-08-10T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"38c0a8d7dd2f","modified":"2026-08-10T00:00:00Z","url":"https://github.com/BiuTrap/CVE-2026-59310"}]},{"url":"https://vulncheck.com/xdb/1f4ee44d6948","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"1f4ee44d6948","modified":"2026-08-10T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"1f4ee44d6948","modified":"2026-08-10T00:00:00Z","url":"https://vulncheck.com/xdb/1f4ee44d6948"}]},{"url":"https://github.com/ChinaRan0/CVE-2026-59310-POC","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"1f4ee44d6948","modified":"2026-08-10T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"1f4ee44d6948","modified":"2026-08-10T00:00:00Z","url":"https://github.com/ChinaRan0/CVE-2026-59310-POC"}]},{"url":"https://vulncheck.com/xdb/4da5b06bd1f3","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"4da5b06bd1f3","modified":"2026-08-10T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"4da5b06bd1f3","modified":"2026-08-10T00:00:00Z","url":"https://vulncheck.com/xdb/4da5b06bd1f3"}]},{"url":"https://github.com/vpxuser/CVE-2026-59310","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"4da5b06bd1f3","modified":"2026-08-10T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"4da5b06bd1f3","modified":"2026-08-10T00:00:00Z","url":"https://github.com/vpxuser/CVE-2026-59310"}]},{"url":"https://vulncheck.com/xdb/e3ba2171e577","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"e3ba2171e577","modified":"2026-08-10T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"e3ba2171e577","modified":"2026-08-10T00:00:00Z","url":"https://vulncheck.com/xdb/e3ba2171e577"}]},{"url":"https://github.com/chu0119/vc-strike","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"e3ba2171e577","modified":"2026-08-10T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"e3ba2171e577","modified":"2026-08-10T00:00:00Z","url":"https://github.com/chu0119/vc-strike"}]}],"packages":[],"pocCandidates":[{"url":"https://github.com/HORKimhab/CVE-2026-59310","source":"poc-in-github","sourceId":"CVE-2026-59310","description":"CVE-2026-59310","modified":"2026-08-17T08:29:14Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-59310","url":"https://github.com/HORKimhab/CVE-2026-59310"},{"source":"poc-in-github","sourceId":"CVE-2026-59310","modified":"2026-08-17T08:29:14Z","url":"https://github.com/HORKimhab/CVE-2026-59310"}],"tags":[]},{"url":"https://github.com/BiuTrap/CVE-2026-59310","source":"poc-in-github","sourceId":"CVE-2026-59310","description":"CVE-2026-59310 PoC","modified":"2026-09-22T14:53:17Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-59310","url":"https://github.com/BiuTrap/CVE-2026-59310"},{"source":"poc-in-github","sourceId":"CVE-2026-59310","modified":"2026-09-22T14:53:17Z","url":"https://github.com/BiuTrap/CVE-2026-59310"}],"tags":[]},{"url":"https://github.com/zgsfsec/CVE-2026-59310-POC","source":"poc-in-github","sourceId":"CVE-2026-59310","description":"CVE-2026-59310-POC 仅用于自测，请勿用于攻击","modified":"2026-10-25T14:12:08Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-59310","url":"https://github.com/zgsfsec/CVE-2026-59310-POC"},{"source":"poc-in-github","sourceId":"CVE-2026-59310","modified":"2026-10-25T14:12:08Z","url":"https://github.com/zgsfsec/CVE-2026-59310-POC"}],"tags":[]},{"url":"https://github.com/vpxuser/CVE-2026-59310","source":"poc-in-github","sourceId":"CVE-2026-59310","description":"ChinaRan0/CVE-2026-59310-POC 的优化版本。子命令、一次性 cron、带远端 PTY 的交互 shell。仅限授权测试。","modified":"2026-10-21T18:04:56Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-59310","url":"https://github.com/vpxuser/CVE-2026-59310"},{"source":"poc-in-github","sourceId":"CVE-2026-59310","modified":"2026-10-21T18:04:56Z","url":"https://github.com/vpxuser/CVE-2026-59310"}],"tags":[]},{"url":"https://github.com/chu0119/vc-strike","source":"poc-in-github","sourceId":"CVE-2026-59310","description":"VC-Strike — VMware vCenter CVE-2026-59310 (unauth root RCE) & CVE-2026-59309 (SRP auth bypass) authorized pentest suite. GUI+CLI, multi-session C2, stdlib-only. 授权测试专用","modified":"2026-10-23T06:14:58Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-59310","url":"https://github.com/chu0119/vc-strike"},{"source":"poc-in-github","sourceId":"CVE-2026-59310","modified":"2026-10-23T06:14:58Z","url":"https://github.com/chu0119/vc-strike"}],"tags":[]}],"cataloguedPoc":[{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"38c0a8d7dd2f","url":"https://vulncheck.com/xdb/38c0a8d7dd2f","cve":"CVE-2026-59310","dateAdded":"2026-08-17T14:15:33Z","modified":"2026-08-10T00:00:00Z","exploitType":"initial-access","repositoryUrl":"https://github.com/BiuTrap/CVE-2026-59310","observations":[{"dateAdded":"2026-08-17T14:15:33Z","exploitType":"initial-access"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"38c0a8d7dd2f","modified":"2026-08-10T00:00:00Z","url":"https://vulncheck.com/xdb/38c0a8d7dd2f"}]},{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"1f4ee44d6948","url":"https://vulncheck.com/xdb/1f4ee44d6948","cve":"CVE-2026-59310","dateAdded":"2026-09-25T20:11:04Z","modified":"2026-08-10T00:00:00Z","exploitType":"initial-access","repositoryUrl":"https://github.com/ChinaRan0/CVE-2026-59310-POC","observations":[{"dateAdded":"2026-09-25T20:11:04Z","exploitType":"initial-access"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"1f4ee44d6948","modified":"2026-08-10T00:00:00Z","url":"https://vulncheck.com/xdb/1f4ee44d6948"}]},{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"4da5b06bd1f3","url":"https://vulncheck.com/xdb/4da5b06bd1f3","cve":"CVE-2026-59310","dateAdded":"2026-09-29T08:02:13Z","modified":"2026-08-10T00:00:00Z","exploitType":"initial-access","repositoryUrl":"https://github.com/vpxuser/CVE-2026-59310","observations":[{"dateAdded":"2026-09-29T08:02:13Z","exploitType":"initial-access"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"4da5b06bd1f3","modified":"2026-08-10T00:00:00Z","url":"https://vulncheck.com/xdb/4da5b06bd1f3"}]},{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"e3ba2171e577","url":"https://vulncheck.com/xdb/e3ba2171e577","cve":"CVE-2026-59310","dateAdded":"2026-10-02T04:19:32Z","modified":"2026-08-10T00:00:00Z","exploitType":"initial-access","repositoryUrl":"https://github.com/chu0119/vc-strike","observations":[{"dateAdded":"2026-10-02T04:19:32Z","exploitType":"initial-access"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"e3ba2171e577","modified":"2026-08-10T00:00:00Z","url":"https://vulncheck.com/xdb/e3ba2171e577"}]}],"vendorStatements":[],"exploitationSources":[{"source":"euvd","sourceId":"EUVD-2026-51097","catalog":"ENISA EU KEV","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-51097","dateAdded":"2026-08-10","origins":[{"source":"euvd","sourceId":"EUVD-2026-51097","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-51097"}]},{"source":"vulncheck-kev","sourceId":"CVE-2026-59310","catalog":"VulnCheck KEV","kind":"catalogue","url":"https://vulncheck.com/kev","dateAdded":"2026-08-10T00:00:00Z","modified":"2026-08-10T00:00:00Z","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","knownRansomwareCampaignUse":"Known","reportedByVulncheckCanaries":false,"vendorProject":"Broadcom","product":"VMware vCenter","dueDate":"2026-08-21T00:00:00Z","cisaDateAdded":"2026-08-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-59310","modified":"2026-08-10T00:00:00Z","url":"https://vulncheck.com/kev"}]},{"source":"vulncheck-kev","sourceId":"CVE-2026-59310","catalog":"VulnCheck KEV","kind":"report","url":"https://medium.com/@quirso_de/active-exploitation-of-cve-2026-59310-361-victim-ips-across-47-countries-9783187cc6ff","dateAdded":"2026-08-10T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-59310","url":"https://medium.com/@quirso_de/active-exploitation-of-cve-2026-59310-361-victim-ips-across-47-countries-9783187cc6ff"}]},{"source":"vulncheck-kev","sourceId":"CVE-2026-59310","catalog":"VulnCheck KEV","kind":"report","url":"https://previdian.com/CVE-2026-59310","dateAdded":"2026-08-12T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-59310","url":"https://previdian.com/CVE-2026-59310"}]},{"source":"vulncheck-kev","sourceId":"CVE-2026-59310","catalog":"VulnCheck KEV","kind":"report","url":"https://medium.com/@quirso_de/global-exploitation-of-cve-2026-59310-by-suspected-chinese-nexus-apt-related-cve-2026-59309-443a79e1466d","dateAdded":"2026-08-14T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-59310","url":"https://medium.com/@quirso_de/global-exploitation-of-cve-2026-59310-by-suspected-chinese-nexus-apt-related-cve-2026-59309-443a79e1466d"}]},{"source":"vulncheck-kev","sourceId":"CVE-2026-59310","catalog":"VulnCheck KEV","kind":"report","url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json","dateAdded":"2026-08-18T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-59310","url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json"}]},{"source":"vulncheck-kev","sourceId":"CVE-2026-59310","catalog":"VulnCheck KEV","kind":"report","url":"https://cydome.io/maritime-cybersecurity-bulletin-august-21st-2026/","dateAdded":"2026-08-21T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-59310","url":"https://cydome.io/maritime-cybersecurity-bulletin-august-21st-2026/"}]},{"source":"vulncheck-kev","sourceId":"CVE-2026-59310","catalog":"VulnCheck KEV","kind":"report","url":"https://www.recordedfuture.com/blog/august-2026-cve-landscape","dateAdded":"2026-09-08T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-59310","url":"https://www.recordedfuture.com/blog/august-2026-cve-landscape"}]}]}