Exploit for Sale Targeting the CVE-2026-59310 1-Day Vulnerability in VMware vSphere

Exploit for Sale Targeting the CVE-2026-59310 1-Day Vulnerability in VMware vSphere

Vulnerability Type: RCE Affected Versions: VMware vSphere 8.x and 9.x (vCenter Server component) Price: $10,000

According to the seller, there are no working exploits for this vulnerability available in the public domain. The CVE-2026-59310 vulnerability is being actively exploited by attackers: over 361 compromised IP addresses have been identified in 47 countries, including the United States, Germany, Turkey, Iran, and France. In addition, over 450 servers accessible from the internet and potentially vulnerable to attacks have been identified. In actual incidents, attackers used the Reverse SSH tool to establish a foothold in the system, set up remote access, and create command-and-control (C2) channels. The vulnerability was also exploited in ransomware attacks to gain privileged access to corporate virtualized infrastructure.