Three Critical VMware Flaws Allow Auth Bypass, Code Execution, and VM Escape

Broadcom disclosed five vulnerabilities across VMware ESX, vCenter, Workstation, and Fusion. Three are critical: (1) CVE-2026-59309 (CVSS 9.8) - Authentication bypass in VMware vCenter allowing unauthenticated remote access via network access. (2) CVE-2026-59310 (CVSS 9.8) - Directory traversal vulnerability in VMware vCenter enabling remote arbitrary code execution by any actor with network access. (3) CVE-2026-47876 (CVSS 9.3) - Out-of-bounds write in the VMXNET3 virtual network adapter of VMware ESX, allowing a local administrative user inside a VM to escape and execute code on the ESX host (VM escape). Two additional flaws: (4) CVE-2026-41703 (CVSS 7.6) - Out-of-bounds read in VMware ESX exploitable by actors with VM deployment privileges, leading to information disclosure or DoS; on Workstation/Fusion limited to information disclosure. (5) CVE-2026-41709 (CVSS 2.7) - Insufficient logging in VMware ESX allowing a malicious administrator to perform operations without audit trails. No in-the-wild exploitation has been observed.