vcenter
Safeguard articles tagged "vcenter" — guides, analysis, and best practices for software supply chain and application security.
3 articles
Broadcom's VMware Stack: Three Confirmed-Exploited CVEs Across the Management Plane
vCenter Server, Aria Operations, and VMware Tools each contributed a confirmed-exploited vulnerability, spanning an unauthenticated RCE, a migration-time command injection, and a local privilege escalation.
VMware vCenter's Syslog Server Had a Path Traversal Bug CISA Ties to Ransomware
CVE-2026-59310, a directory traversal vulnerability in vCenter's Syslog server leading to code execution, carries CISA's confirmed ransomware campaign flag.
VMware vCenter (CVE-2021-21985) Explained: The vSAN Plugin RCE
CVE-2021-21985 is a CVSS 9.8 unauthenticated RCE in VMware vCenter Server's vSAN Health plugin, enabled by default on every install. Here is how it works and the patched builds to run.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.