VMware vCenter contains a directory traversal vulnerability in the Syslog server. A malicious actor with network access to vCenter may exploit this issue to exe…

VMware vCenter contains a directory traversal vulnerability in its Syslog server component. A malicious actor with network access to vCenter can exploit this vulnerability to execute arbitrary code on the affected system. The vulnerability does not appear to require authentication, making it particularly dangerous in environments where vCenter is network-accessible. This is a critical vulnerability affecting VMware vCenter infrastructure, which is widely used in enterprise virtualization environments. The issue is currently awaiting full analysis on NVD. Broadcom has published a security advisory addressing the vulnerability. Organizations running VMware vCenter should apply patches or mitigations as soon as they become available.