Skip to content
OpenAdvisories

Product · VMware

Cloud Foundation

17 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-59310 Exploited · Ransomware Public exploit EPSS 62%

    vCenter directory-traversal vulnerability

    VMware vCenter contains a directory traversal vulnerability in the Syslog server. A malicious actor with network access to vCenter may exploit this issue to execute arbitrary code.

    VMware Cloud Foundation Telco Cloud Platform Telco Cloud Infrastructure Virtualization
    KEV Aug 18, 2026
  • Medium 4.3
    CVE-2025-41228 Public exploit

    VMware ESXi and vCenter Server Reflected Cross Site Scripting (XSS) Vulnerability

    VMware ESXi and vCenter Server contain a reflected cross-site scripting vulnerability due to improper input validation. A malicious actor with network access to the login page of certain ESXi host or vCenter Server URL paths may exploit this issue to steal co…

    VMware ESXi Cloud Foundation Telco Cloud Platform Virtualization