{
  "site": "https://pwn.watch",
  "generatedAt": "2026-10-22T19:10:46.198Z",
  "tag": {
    "id": "vcenter",
    "label": "vCenter",
    "isStack": false,
    "url": "https://pwn.watch/t/vcenter",
    "feed": "https://pwn.watch/t/vcenter/feed.xml"
  },
  "counts": {
    "incidents": 4,
    "live": 0,
    "notFullyPatched": 0,
    "patched": 4
  },
  "incidents": [
    {
      "slug": "broadcom-vmware-vcenter-cve-2026-59310",
      "title": "Broadcom VMware vCenter: Broadcom VMware vCenter Path Traversal Vulnerability",
      "url": "https://pwn.watch/i/broadcom-vmware-vcenter-cve-2026-59310",
      "json": "https://pwn.watch/i/broadcom-vmware-vcenter-cve-2026-59310.json",
      "status": "closed",
      "severity": "high",
      "patchStatus": "patched",
      "product": "Broadcom VMware vCenter",
      "tags": [
        "vmware",
        "vcenter",
        "broadcom",
        "ransomware",
        "cisa-kev"
      ],
      "cveIds": [
        "CVE-2026-59310"
      ],
      "affectedVersions": [
        "See vendor advisory / CISA notes (versions not always listed in KEV feed)"
      ],
      "fixedVersions": [
        "See vendor advisory linked in sources"
      ],
      "startedAt": "2026-08-18",
      "closedAt": "2026-08-18",
      "updatedAt": "2026-08-18",
      "summary": "Broadcom VMware vCenter contains a path traversal vulnerability which could allow a threat actor with network access to vCenter to execute arbitrary code. Added to CISA KEV on 2026-08-18.",
      "xPost": null
    },
    {
      "slug": "vmware-vcenter-server-cve-2024-38812-38813",
      "title": "VMware vCenter Server: 2 actively exploited vulnerabilities",
      "url": "https://pwn.watch/i/vmware-vcenter-server-cve-2024-38812-38813",
      "json": "https://pwn.watch/i/vmware-vcenter-server-cve-2024-38812-38813.json",
      "status": "closed",
      "severity": "critical",
      "patchStatus": "patched",
      "product": "VMware vCenter Server",
      "tags": [
        "vmware",
        "vcenter",
        "cisa-kev"
      ],
      "cveIds": [
        "CVE-2024-38812",
        "CVE-2024-38813"
      ],
      "affectedVersions": [
        "See vendor advisory (versions are not listed in the KEV record)"
      ],
      "fixedVersions": [
        "See vendor advisory linked in sources"
      ],
      "startedAt": "2024-09-17",
      "closedAt": "2024-11-20",
      "updatedAt": "2024-11-20",
      "summary": "CVE-2024-38812: VMware vCenter Server contains a heap-based buffer overflow vulnerability in the implementation of the DCERPC protocol. This vulnerability could allow an attacker with network access to the vCenter Server to execute remote code by sending a specially crafted packet. CVE-2024-38813: VMware vCenter contains an improper check for dropped privileges vulnerability. This vulnerability could allow an attacker with network access to the vCenter Server to escalate privileges to root by sending a specially crafted packet. Added to the CISA KEV catalog on 2024-11-20.",
      "xPost": null
    },
    {
      "slug": "vmware-vcenter-server-cve-2022-22948",
      "title": "VMware vCenter Server Incorrect Default File Permissions",
      "url": "https://pwn.watch/i/vmware-vcenter-server-cve-2022-22948",
      "json": "https://pwn.watch/i/vmware-vcenter-server-cve-2022-22948.json",
      "status": "closed",
      "severity": "medium",
      "patchStatus": "patched",
      "product": "VMware vCenter Server",
      "tags": [
        "vmware",
        "vcenter",
        "cisa-kev"
      ],
      "cveIds": [
        "CVE-2022-22948"
      ],
      "affectedVersions": [
        "See vendor advisory (versions are not listed in the KEV record)"
      ],
      "fixedVersions": [
        "See vendor advisory linked in sources"
      ],
      "startedAt": "2024-07-17",
      "closedAt": "2024-07-17",
      "updatedAt": "2024-07-17",
      "summary": "VMware vCenter Server contains an incorrect default file permissions vulnerability that allows a remote, privileged attacker to gain access to sensitive information. Added to the CISA KEV catalog on 2024-07-17. CVE-2022-22948 was assigned before 2024; the KEV listing came in 2024.",
      "xPost": null
    },
    {
      "slug": "vmware-vcenter-server-cve-2023-34048",
      "title": "VMware vCenter Server Out-of-Bounds Write",
      "url": "https://pwn.watch/i/vmware-vcenter-server-cve-2023-34048",
      "json": "https://pwn.watch/i/vmware-vcenter-server-cve-2023-34048.json",
      "status": "closed",
      "severity": "critical",
      "patchStatus": "patched",
      "product": "VMware vCenter Server",
      "tags": [
        "vmware",
        "vcenter",
        "cisa-kev",
        "rce"
      ],
      "cveIds": [
        "CVE-2023-34048"
      ],
      "affectedVersions": [
        "See vendor advisory (versions are not listed in the KEV record)"
      ],
      "fixedVersions": [
        "See vendor advisory linked in sources"
      ],
      "startedAt": "2024-01-22",
      "closedAt": "2024-01-22",
      "updatedAt": "2024-01-22",
      "summary": "VMware vCenter Server contains an out-of-bounds write vulnerability in the implementation of the DCERPC protocol that allows an attacker to conduct remote code execution. Added to the CISA KEV catalog on 2024-01-22. CVE-2023-34048 was assigned before 2024; the KEV listing came in 2024.",
      "xPost": null
    }
  ],
  "posts": [],
  "changes": [
    {
      "incident": "broadcom-vmware-vcenter-cve-2026-59310",
      "incidentTitle": "Broadcom VMware vCenter: Broadcom VMware vCenter Path Traversal Vulnerability",
      "severity": "high",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2026-08-18",
      "title": "CISA added CVE-2026-59310 to the KEV catalog (due 2026-08-21).",
      "body": null,
      "sourceUrl": null,
      "url": "https://pwn.watch/i/broadcom-vmware-vcenter-cve-2026-59310"
    },
    {
      "incident": "vmware-vcenter-server-cve-2024-38812-38813",
      "incidentTitle": "VMware vCenter Server: 2 actively exploited vulnerabilities",
      "severity": "critical",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2024-11-20",
      "title": "CISA added CVE-2024-38812 to the KEV catalog (federal deadline 2024-12-11)",
      "body": null,
      "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
      "url": "https://pwn.watch/i/vmware-vcenter-server-cve-2024-38812-38813"
    },
    {
      "incident": "vmware-vcenter-server-cve-2024-38812-38813",
      "incidentTitle": "VMware vCenter Server: 2 actively exploited vulnerabilities",
      "severity": "critical",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2024-11-20",
      "title": "CISA added CVE-2024-38813 to the KEV catalog (federal deadline 2024-12-11)",
      "body": null,
      "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
      "url": "https://pwn.watch/i/vmware-vcenter-server-cve-2024-38812-38813"
    },
    {
      "incident": "vmware-vcenter-server-cve-2024-38812-38813",
      "incidentTitle": "VMware vCenter Server: 2 actively exploited vulnerabilities",
      "severity": "critical",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2024-09-17",
      "title": "CVE-2024-38812 published",
      "body": null,
      "sourceUrl": "https://nvd.nist.gov/vuln/detail/CVE-2024-38812",
      "url": "https://pwn.watch/i/vmware-vcenter-server-cve-2024-38812-38813"
    },
    {
      "incident": "vmware-vcenter-server-cve-2024-38812-38813",
      "incidentTitle": "VMware vCenter Server: 2 actively exploited vulnerabilities",
      "severity": "critical",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2024-09-17",
      "title": "CVE-2024-38813 published",
      "body": null,
      "sourceUrl": "https://nvd.nist.gov/vuln/detail/CVE-2024-38813",
      "url": "https://pwn.watch/i/vmware-vcenter-server-cve-2024-38812-38813"
    },
    {
      "incident": "vmware-vcenter-server-cve-2022-22948",
      "incidentTitle": "VMware vCenter Server Incorrect Default File Permissions",
      "severity": "medium",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2024-07-17",
      "title": "CISA added CVE-2022-22948 to the KEV catalog (federal deadline 2024-08-07)",
      "body": null,
      "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
      "url": "https://pwn.watch/i/vmware-vcenter-server-cve-2022-22948"
    },
    {
      "incident": "vmware-vcenter-server-cve-2023-34048",
      "incidentTitle": "VMware vCenter Server Out-of-Bounds Write",
      "severity": "critical",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2024-01-22",
      "title": "CISA added CVE-2023-34048 to the KEV catalog (federal deadline 2024-02-12)",
      "body": null,
      "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
      "url": "https://pwn.watch/i/vmware-vcenter-server-cve-2023-34048"
    }
  ]
}