Vulnerabilities in VMware vCenter Server, ESXi, and the Spring Framework VMware stewards — virtualization and application infrastructure whose compromise can mean full control of an organization's entire virtual estate. Combined article + CVE feed for the VMware beat.https://0daynews.com/en-ushttps://0daynews.com/cve/cve-2018-6961/https://0daynews.com/cve/cve-2018-6961/VMware SD-WAN Edge by VeloCloud contains a command injection vulnerability in the local web UI component. Successful exploitation of this issue could result in remote code execution.Fri, 14 Aug 2026 00:00:00 GMTVMwarehighcvehttps://0daynews.com/cve/cve-2019-5544/https://0daynews.com/cve/cve-2019-5544/VMware ESXi and Horizon Desktop as a Service (DaaS) OpenSLP contains a heap-based buffer overflow vulnerability that allows an attacker with network access to port 427 to overwrite the heap of the OpenSLP service to perform remote code execution.Fri, 14 Aug 2026 00:00:00 GMTVMwarecriticalcvehttps://0daynews.com/cve/cve-2020-3950/https://0daynews.com/cve/cve-2020-3950/VMware Fusion, Remote Console (VMRC) for Mac, and Horizon Client for Mac contain a privilege escalation vulnerability due to improper use of setuid binaries that allows attackers to escalate privileges to root.Fri, 14 Aug 2026 00:00:00 GMTVMwarehighcvehttps://0daynews.com/cve/cve-2020-3952/https://0daynews.com/cve/cve-2020-3952/VMware vCenter Server contains an information disclosure vulnerability in the VMware Directory Service (vmdir) when the Platform Services Controller (PSC) does not correctly implement access controls. Successful exploitation allows an attacker with network access to port 389 to extract sensitive information.Fri, 14 Aug 2026 00:00:00 GMTVMwarecriticalcvehttps://0daynews.com/cve/cve-2020-3992/https://0daynews.com/cve/cve-2020-3992/VMware ESXi OpenSLP contains a use-after-free vulnerability that allows an attacker residing in the management network with access to port 427 to perform remote code execution.Fri, 14 Aug 2026 00:00:00 GMTVMwarecriticalcvehttps://0daynews.com/cve/cve-2020-4006/https://0daynews.com/cve/cve-2020-4006/VMware Workspace One Access, Access Connector, Identity Manager, and Identity Manager Connector contain a command injection vulnerability. An attacker with network access to the administrative configurator on port 8443 and a valid password for the configurator administrator account can execute commands with unrestricted privileges on the underlying operating system.Fri, 14 Aug 2026 00:00:00 GMTVMwarecriticalcvehttps://0daynews.com/cve/cve-2021-21972/https://0daynews.com/cve/cve-2021-21972/A remote-code-execution vulnerability in the vSphere Client (HTML5) plugin for VMware vCenter Server allows an unauthenticated attacker with network access to port 443 to upload a malicious file and execute arbitrary commands with unrestricted privileges on the underlying operating system.Fri, 14 Aug 2026 00:00:00 GMTVMwarecriticalcvehttps://0daynews.com/cve/cve-2021-21973/https://0daynews.com/cve/cve-2021-21973/VMware vCenter Server and Cloud Foundation Server contain a SSRF vulnerability due to improper validation of URLs in a vCenter Server plugin. This allows for information disclosure.Fri, 14 Aug 2026 00:00:00 GMTVMwaremediumcvehttps://0daynews.com/cve/cve-2021-21975/https://0daynews.com/cve/cve-2021-21975/Server Side Request Forgery (SSRF) in vRealize Operations Manager API prior to 8.4 may allow a malicious actor with network access to the vRealize Operations Manager API to perform a SSRF attack to steal administrative credentials.Fri, 14 Aug 2026 00:00:00 GMTVMwarehighcvehttps://0daynews.com/cve/cve-2021-21985/https://0daynews.com/cve/cve-2021-21985/VMware vSphere Client contains an improper input validation vulnerability in the Virtual SAN Health Check plug-in, which is enabled by default in vCenter Server, which allows for remote code execution.Fri, 14 Aug 2026 00:00:00 GMTVMwarecriticalcvehttps://0daynews.com/cve/cve-2021-22005/https://0daynews.com/cve/cve-2021-22005/VMware vCenter Server contains a file upload vulnerability in the Analytics service that allows a user with network access to port 443 to execute code.Fri, 14 Aug 2026 00:00:00 GMTVMwarecriticalcvehttps://0daynews.com/cve/cve-2021-22017/https://0daynews.com/cve/cve-2021-22017/Rhttproxy as used in vCenter Server contains a vulnerability due to improper implementation of URI normalization.Fri, 14 Aug 2026 00:00:00 GMTVMwaremediumcvehttps://0daynews.com/cve/cve-2022-22947/https://0daynews.com/cve/cve-2022-22947/Spring Cloud Gateway applications are vulnerable to a code injection attack when the Gateway Actuator endpoint is enabled, exposed and unsecured.Fri, 14 Aug 2026 00:00:00 GMTVMwarecriticalcvehttps://0daynews.com/cve/cve-2022-22948/https://0daynews.com/cve/cve-2022-22948/VMware vCenter Server contains an incorrect default file permissions vulnerability that allows a remote, privileged attacker to gain access to sensitive information.Fri, 14 Aug 2026 00:00:00 GMTVMwaremediumcvehttps://0daynews.com/cve/cve-2022-22954/https://0daynews.com/cve/cve-2022-22954/VMware Workspace ONE Access and Identity Manager allow for remote code execution due to server-side template injection.Fri, 14 Aug 2026 00:00:00 GMTVMwarecriticalcvehttps://0daynews.com/cve/cve-2022-22960/https://0daynews.com/cve/cve-2022-22960/VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a privilege escalation vulnerability due to improper permissions in support scripts.Fri, 14 Aug 2026 00:00:00 GMTVMwarehighcvehttps://0daynews.com/cve/cve-2022-22965/https://0daynews.com/cve/cve-2022-22965/A remote-code-execution vulnerability in the Spring Framework, stewarded by VMware, allows an attacker to achieve RCE via data binding under specific conditions — JDK 9+, Spring Framework versions before 5.3.18 / 5.2.20, and deployment as a traditional WAR on Apache Tomcat.Fri, 14 Aug 2026 00:00:00 GMTVMwarecriticalcvehttps://0daynews.com/cve/cve-2023-20867/https://0daynews.com/cve/cve-2023-20867/VMware Tools contains an authentication bypass vulnerability in the vgauth module. A fully compromised ESXi host can force VMware Tools to fail to authenticate host-to-guest operations, impacting the confidentiality and integrity of the guest virtual machine. An attacker must have root access over ESXi to exploit this vulnerability.Fri, 14 Aug 2026 00:00:00 GMTVMwarelowcvehttps://0daynews.com/cve/cve-2023-20887/https://0daynews.com/cve/cve-2023-20887/VMware Aria Operations for Networks (formerly vRealize Network Insight) contains a command injection vulnerability that allows a malicious actor with network access to perform an attack resulting in remote code execution.Fri, 14 Aug 2026 00:00:00 GMTVMwarecriticalcvehttps://0daynews.com/cve/cve-2023-34048/https://0daynews.com/cve/cve-2023-34048/VMware vCenter Server contains an out-of-bounds write vulnerability in the implementation of the DCERPC protocol that allows an attacker to conduct remote code execution.Fri, 14 Aug 2026 00:00:00 GMTVMwarecriticalcvehttps://0daynews.com/cve/cve-2024-37085/https://0daynews.com/cve/cve-2024-37085/VMware ESXi contains an authentication bypass vulnerability. A malicious actor with sufficient Active Directory (AD) permissions can gain full access to an ESXi host that was previously configured to use AD for user management by re-creating the configured AD group ('ESXi Admins' by default) after it was deleted from AD.Fri, 14 Aug 2026 00:00:00 GMTVMwaremediumcvehttps://0daynews.com/cve/cve-2024-38812/https://0daynews.com/cve/cve-2024-38812/VMware vCenter Server contains a heap-based buffer overflow vulnerability in the implementation of the DCERPC protocol. This vulnerability could allow an attacker with network access to the vCenter Server to execute remote code by sending a specially crafted packet.Fri, 14 Aug 2026 00:00:00 GMTVMwarecriticalcvehttps://0daynews.com/cve/cve-2024-38813/https://0daynews.com/cve/cve-2024-38813/VMware vCenter contains an improper check for dropped privileges vulnerability. This vulnerability could allow an attacker with network access to the vCenter Server to escalate privileges to root by sending a specially crafted packet.Fri, 14 Aug 2026 00:00:00 GMTVMwarehighcvehttps://0daynews.com/cve/cve-2025-22224/https://0daynews.com/cve/cve-2025-22224/VMware ESXi and Workstation contain a time-of-check time-of-use (TOCTOU) race condition vulnerability that leads to an out-of-bounds write. Successful exploitation enables an attacker with local administrative privileges on a virtual machine to execute code as the virtual machine's VMX process running on the host.Fri, 14 Aug 2026 00:00:00 GMTVMwarecriticalcvehttps://0daynews.com/cve/cve-2025-22225/https://0daynews.com/cve/cve-2025-22225/VMware ESXi contains an arbitrary write vulnerability. Successful exploitation allows an attacker with privileges within the VMX process to trigger an arbitrary kernel write leading to an escape of the sandbox.Fri, 14 Aug 2026 00:00:00 GMTVMwarehighcvehttps://0daynews.com/cve/cve-2025-22226/https://0daynews.com/cve/cve-2025-22226/VMware ESXi, Workstation, and Fusion contain an information disclosure vulnerability due to an out-of-bounds read in HGFS. Successful exploitation allows an attacker with administrative privileges to a virtual machine to leak memory from the vmx process.Fri, 14 Aug 2026 00:00:00 GMTVMwarehighcvehttps://0daynews.com/articles/2026-08-13-vcenter-cve-2026-59310-reverse-ssh-persistence/https://0daynews.com/articles/2026-08-13-vcenter-cve-2026-59310-reverse-ssh-persistence/Threat actors exploiting CVE-2026-59310 are deploying a reverse SSH tool for persistent access on compromised vCenter management planes.Thu, 13 Aug 2026 20:00:00 GMTVMwarearticlehttps://0daynews.com/articles/2026-08-12-vcenter-cve-2026-59310-exploited-in-wild/https://0daynews.com/articles/2026-08-12-vcenter-cve-2026-59310-exploited-in-wild/CVE-2026-59310 exploitation confirmed in VMware vCenter Server. CVSS 9.8. Patches out since July 29 — unpatched instances need isolation now.Wed, 12 Aug 2026 14:00:00 GMTVMwarearticlehttps://0daynews.com/articles/2026-07-31-vmware-vcenter-esxi-critical-auth-bypass-vm-escape-patch/https://0daynews.com/articles/2026-07-31-vmware-vcenter-esxi-critical-auth-bypass-vm-escape-patch/Broadcom patched five CVEs in VMware vCenter, ESXi, Workstation, and Fusion. Three are critical: auth bypass, RCE, VM escape. Patch vCenter now.Fri, 31 Jul 2026 20:00:00 GMTVMwarearticlehttps://0daynews.com/articles/2026-07-29-broadcom-vmware-vcenter-esx-critical-patches/https://0daynews.com/articles/2026-07-29-broadcom-vmware-vcenter-esx-critical-patches/Broadcom shipped security updates for VMware vCenter, ESX, Workstation, and Fusion covering three critical flaws including a CVSS 9.8 no-auth bypass. Patch now.Wed, 29 Jul 2026 18:00:00 GMTVMwarearticlehttps://0daynews.com/articles/2026-07-04-vmware-vcenter-vsphere-client-rce-cve-2021-21972/https://0daynews.com/articles/2026-07-04-vmware-vcenter-vsphere-client-rce-cve-2021-21972/CVE-2021-21972 let unauthenticated attackers execute code with root privileges on VMware vCenter Server — and internet scans found tens of thousands of instances exposed anyway, against VMware's own guidance.Sat, 04 Jul 2026 15:30:00 GMTVMwarearticlehttps://0daynews.com/articles/2026-07-04-spring4shell-vmware-spring-framework-rce/https://0daynews.com/articles/2026-07-04-spring4shell-vmware-spring-framework-rce/CVE-2022-22965 leaked publicly before VMware's patch was ready — but unlike Log4Shell, exploitation required a specific combination of conditions that made blanket panic the wrong response.Sat, 04 Jul 2026 13:00:00 GMTVMwarearticle