VMware vCenter contains an authentication bypass vulnerability in the VMware Directory Service. A malicious actor with network access to vCenter may exploit thi…

CVE-2026-59309 describes a critical authentication bypass vulnerability in VMware vCenter Server, specifically within the VMware Directory Service. A remote attacker with network access to vCenter can exploit this flaw to bypass authentication mechanisms entirely and gain unauthorized access to the system. No credentials are required for exploitation, making this a high-severity threat to virtualized enterprise environments. The vulnerability affects organizations running VMware vCenter and could allow full administrative compromise. Broadcom has published a security advisory addressing the issue. The NVD listing is currently awaiting full analysis and scoring. Given the nature of authentication bypass vulnerabilities in vCenter, this poses significant risk to cloud and virtualization infrastructure.