Security feed

24 October 2026

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

VMware vCenter Server Improper Input Validation Vulnerability

VMware vSphere Client contains an improper input validation vulnerability in the Virtual SAN Health Check plug-in, which is enabled by default in vCenter Server, which allows for remote code execution. CISA required action: Apply updates per vendor instructions.

vCenter Server CVE-2021-21985

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2021-21985

vCenter Server

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2021-21985
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #3748 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:40:18 GMT
Publisher date: Wed, 03 Nov 2021 00:00:00 GMT

Read the original announcement

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

VMware vCenter Server Remote Code Execution Vulnerability

VMware vCenter Server vSphere Client contains a remote code execution vulnerability in a vCenter Server plugin which allows an attacker with network access to port 443 to execute commands with unrestricted privileges on the underlying operating system. CISA required action: Apply updates per vendor instructions.

vCenter Server CVE-2021-21972

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2021-21972

vCenter Server

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2021-21972
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #3745 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:40:16 GMT
Publisher date: Wed, 03 Nov 2021 00:00:00 GMT

Read the original announcement

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

VMware vCenter Server Information Disclosure Vulnerability

VMware vCenter Server contains an information disclosure vulnerability in the VMware Directory Service (vmdir) when the Platform Services Controller (PSC) does not correctly implement access controls. Successful exploitation allows an attacker with network access to port 389 to extract sensitive information. CISA required action: Apply updates per vendor instructions.

vCenter Server CVE-2020-3952

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2020-3952

vCenter Server

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2020-3952
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #3744 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:40:15 GMT
Publisher date: Wed, 03 Nov 2021 00:00:00 GMT

Read the original announcement

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

VMware vCenter Server File Upload Vulnerability

VMware vCenter Server contains a file upload vulnerability in the Analytics service that allows a user with network access to port 443 to execute code. CISA required action: Apply updates per vendor instructions.

vCenter Server CVE-2021-22005

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2021-22005

vCenter Server

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2021-22005
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #3742 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:40:14 GMT
Publisher date: Wed, 03 Nov 2021 00:00:00 GMT

Read the original announcement

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

VMware vCenter Server Improper Access Control

Rhttproxy as used in vCenter Server contains a vulnerability due to improper implementation of URI normalization. CISA required action: Apply updates per vendor instructions.

vCenter Server CVE-2021-22017

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2021-22017

vCenter Server

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2021-22017
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #2930 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:26:33 GMT
Publisher date: Mon, 10 Jan 2022 00:00:00 GMT

Read the original announcement

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

VMware vCenter Server Out-of-Bounds Write Vulnerability

VMware vCenter Server contains an out-of-bounds write vulnerability in the implementation of the DCERPC protocol that allows an attacker to conduct remote code execution. CISA required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

vCenter Server CVE-2023-34048

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2023-34048

vCenter Server

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2023-34048
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #1185 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 20:57:24 GMT
Publisher date: Mon, 22 Jan 2024 00:00:00 GMT

Read the original announcement

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

VMware vCenter Server Incorrect Default File Permissions Vulnerability

VMware vCenter Server contains an incorrect default file permissions vulnerability that allows a remote, privileged attacker to gain access to sensitive information. CISA required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

vCenter Server CVE-2022-22948

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2022-22948

vCenter Server

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2022-22948
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #1122 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 20:56:47 GMT
Publisher date: Wed, 17 Jul 2024 00:00:00 GMT

Read the original announcement

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

VMware vCenter Server Privilege Escalation Vulnerability

VMware vCenter contains an improper check for dropped privileges vulnerability. This vulnerability could allow an attacker with network access to the vCenter Server to escalate privileges to root by sending a specially crafted packet. CISA required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

vCenter Server CVE-2024-38813

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2024-38813

vCenter Server

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2024-38813
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #1038 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 20:55:08 GMT
Publisher date: Wed, 20 Nov 2024 00:00:00 GMT

Read the original announcement

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

VMware vCenter Server Heap-Based Buffer Overflow Vulnerability

VMware vCenter Server contains a heap-based buffer overflow vulnerability in the implementation of the DCERPC protocol. This vulnerability could allow an attacker with network access to the vCenter Server to execute remote code by sending a specially crafted packet. CISA required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

vCenter Server CVE-2024-38812

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2024-38812

vCenter Server

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2024-38812
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #1037 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 20:55:07 GMT
Publisher date: Wed, 20 Nov 2024 00:00:00 GMT

Read the original announcement