Actively exploited vulnerabilities affecting Broadcom products.https://wildfortech.comhttps://wildfortech.com/security#CVE-2026-59310https://wildfortech.com/security#CVE-2026-59310This path traversal vulnerability in VMware vCenter is serious because vCenter is typically the administrative hub for entire virtualized environments. An attacker who can reach vCenter over the network — without needing to be inside a VPN or have credentials — could exploit this flaw to execute arbitrary code, potentially gaining control over every virtual machine and host managed by that vCenter instance. Compromise of vCenter is effectively compromise of the entire virtual infrastructure it manages.Tue, 18 Aug 2026 00:00:00 GMTBroadcomVMware vCenterhttps://wildfortech.com/security#CVE-2026-22719https://wildfortech.com/security#CVE-2026-22719This vulnerability in Broadcom VMware Aria Operations (formerly vRealize Operations) allows an unauthenticated attacker to inject commands that can lead to full remote code execution. No credentials are required to exploit it, making the attack surface broad. The flaw is triggered during support-assisted product migration workflows, meaning organizations actively migrating or receiving vendor support for migration may be at heightened risk. Successful exploitation could give attackers complete control over the affected system.Tue, 03 Mar 2026 00:00:00 GMTBroadcomVMware Aria Operationshttps://wildfortech.com/security#CVE-2024-37079https://wildfortech.com/security#CVE-2024-37079This vulnerability in VMware vCenter Server allows an attacker with basic network access to the vCenter Server to send maliciously crafted packets targeting the DCERPC protocol implementation. A successful exploit could result in remote code execution — meaning an attacker could run arbitrary code on the server without valid credentials. Since vCenter Server is the central management plane for VMware virtualized environments, compromise could give attackers control over an entire virtual infrastructure.Fri, 23 Jan 2026 00:00:00 GMTBroadcomVMware vCenter Serverhttps://wildfortech.com/security#CVE-2025-41244https://wildfortech.com/security#CVE-2025-41244This vulnerability allows a local, non-administrative user inside a virtual machine to escalate their privileges all the way to root on that same VM. The attack requires VMware Tools to be installed and the VM to be managed by Aria Operations with SDMP enabled — conditions common in enterprise VMware environments. A compromised or malicious user account that would otherwise have limited access could leverage this flaw to gain full control of the guest OS, posing serious risk to workloads and data.Thu, 30 Oct 2025 00:00:00 GMTBroadcomVMware Aria Operations and VMware Tools