Exploit for Sale Targeting a 1-Day Vulnerability in VMware vCenter Server

Dark Web2026-09-28, 10:46
For informational purposes only.
Vulnerability Type: Authentication Bypass Vulnerable Versions:
  • All 9.1.x.x versions up to 9.1.0.0200
  • All 9.0.x.x versions up to 9.0.2.0100
  • All 8.0 versions up to u3k / u2u
  • All 7.0 versions
  • All 6.0 versions
  • All 5.0 versions Price: $40,000
Presumably, this post refers to the CVE-2026-59309 vulnerability—a flaw in the authentication mechanism of VMware Directory Service (vmdird), i.e., the LDAP service that vCenter uses for accounts, roles, and SSO.
Vulnerabilities
Vendors
Products