CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
VMware vCenter Server Syslog Service Directory Traversal Remote Code Execution Vulnerability (CVE-2026-59310)
[Affected Scope] Systems running VMware vCenter Server with the built-in Syslog server service enabled.
[Impact] A remote, unauthenticated attacker with network access can exploit this directory traversal vulnerability to execute arbitrary code and fully compromise the vCenter Server.
[Mitigation] Immediately apply the official security patches provided by Broadcom and restrict network access to Syslog ports (UDP/TCP 514).
Trend Micro Apex One On-Premise Directory Traversal and Remote Code Execution Vulnerability (CVE-2026-34926)
[Affected Scope] Trend Micro Apex One (On-Premise) server installations.
[Impact] A local attacker with administrative credentials can modify key tables via directory traversal to inject and deploy malicious code to connected agents.
[Mitigation] Apply the official security patches provided by Trend Micro immediately and restrict administrative access to the server.