Broadcom patches three VMware flaws: auth bypass, code exec, VM escape
Broadcom’s VMSA‑2026‑0006 fixes CVE‑2026‑59309, letting attackers bypass vCenter authentication, CVE‑2026‑59310, a directory‑traversal that enables remote code execution, and CVE‑2026‑47876, a VMXNET3 bug that permits VM escape. Patches are in vCenter 8.0 U3k and ESXi 8.0 U3k, protecting all VMware Telco Cloud deployments.