The VMware vCenter Server Appliance (vCSA) was compromised in attacks exploiting CVE-2026-59310 and CVE-2026-59309. Attackers abused cron and syslog to execute arbitrary code and deploy backdoors.
The VMware vCenter Server Appliance (vCSA) was compromised in attacks exploiting CVE-2026-59310 and CVE-2026-59309. Attackers abused cron and syslog to execute arbitrary code and deploy backdoors.