VMware vCenter contains an authentication bypass vulnerability in the VMware Directory Service. A malicious actor with network access to vCenter may exploit thi…

CVE-2026-59309 describes a critical authentication bypass vulnerability in VMware vCenter Server, specifically within the VMware Directory Service component. A remote attacker with network access to vCenter can exploit this flaw to bypass authentication mechanisms entirely. Successful exploitation grants unauthorized access to the vCenter system without valid credentials. The vulnerability poses a significant risk to virtualized infrastructure environments managed by VMware vCenter. The issue is documented by NVD and a security advisory has been published by Broadcom. No specific exploitation details or patches are mentioned in the article, but the severity is rated High. Organizations running VMware vCenter should monitor for patches and apply mitigations promptly.