Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

SANS ISC Handlers Diary

Bleeping Computer

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

VMware vCenter in Cloud Foundation contains a critical authentication bypass vulnerability in the VMware Directory Service. This flaw allows an attacker with network access to bypass authentication and gain unauthorized access to the system. The vulnerability affects multiple versions of Cloud Foundation, including 5.x, 9.0.x.x, and 9.1.x.x. The vulnerability has a CVSS score of 9.8, indicating a critical severity with high impact on confidentiality, integrity, and availability. No official patch or remediation details are provided in the available data. There are no known exploits in the wild at this time.

CVE-2026-59309 is an authentication bypass vulnerability in VMware vCenter's Directory Service within VMware Cloud Foundation. A remote attacker with network access can exploit this flaw to bypass authentication controls, potentially gaining unauthorized administrative access. The vulnerability is categorized under CWE-303, indicating an incorrect implementation of an authentication algorithm. Affected versions include 5.x, 9.0.x.x, and 9.1.x.x of VMware Cloud Foundation. The CVSS v3.1 base score is 9.8, reflecting network attack vector, no privileges required, no user interaction, and high impact on confidentiality, integrity, and availability. No patch or official fix information is currently available from the vendor or advisory sources.

Detailed information about Kwetsbaarheden verholpen in VMware producten affecting Nationaal Cyber Security Centrum VMware. Get real-time updates, technical deta

Kwetsbaarheden verholpen in VMware producten - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2026-59309: CWE-303 Incorrect implementation of authentication algorithm in VMware Cloud Foundation

VMware vCenter contains a directory traversal vulnerability in the Syslog server. A malicious actor with network access to vCenter may exploit this issue to execute arbitrary code.

This vulnerability (CVE-2026-59310) is classified as CWE-22, an improper limitation of a pathname to a restricted directory, commonly known as a path traversal flaw. It exists in the Syslog server component of VMware vCenter within Cloud Foundation. An attacker with network access can exploit this flaw to execute arbitrary code remotely, potentially compromising the affected system. The vulnerability affects versions >=5.0.0 and <6.0.0, as well as multiple 9.x versions prior to 9.0.9999 and 9.1.9999. The CVSS 3.1 base score is 9.8, reflecting critical impact with no required privileges or user interaction.

Detailed information about CVE-2026-59310: CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in VMware Cloud Foundation affe

CVE-2026-59310: CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in VMware Cloud Foundation - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2026-59310: CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in VMware Cloud Foundation


CVE-2026-59309: CWE-303 Incorrect implementation of authentication algorithm in VMware Cloud FoundationCVE-2026-59309 0 VMware vCenter in Cloud Foundation contains a critical authentication bypass vulnerability in the VMware Directory Service. This flaw allows an attacker with network access to bypass authentication and gain unauthorized access to the system. The vulnerability affects multiple versions of Cloud Foundation, including 5.x, 9.0.x.x, and 9.1.x.x. The vulnerability has a CVSS score of 9.8, indicating a critical severity with high impact on confidentiality, integrity, and availability. No official patch or remediation details are provided in the available data. There are no known exploits in the wild at this time. CriticalVulnerability#gcve #csaf #cve-2026-59309 Join the discussion	GCVE Database	07/30/2026, 12:19:52 UTC Added: 07/30/2026, 05:47:22 UTC
CVE-2026-59310: CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in VMware Cloud FoundationCVE-2026-59310 0 VMware vCenter contains a directory traversal vulnerability in the Syslog server. A malicious actor with network access to vCenter may exploit this issue to execute arbitrary code. CriticalVulnerability#cve #cve-2026-59310 #cwe-22 Join the discussion	CVE Database V5	07/30/2026, 12:19:25 UTC Added: 07/30/2026, 12:52:41 UTC

Threats Tagged 'cve-2026-59310'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2026-59310'

Lead Pen Test Professional