Home / Sep 16, 2026 / Story
0
#3 BleepingComputer general September 15, 2026 at 12:16 UTC

CISA: Critical VMware RCE flaw now exploited by ransomware gangs

By Sergiu Gatlan

AI Summary

CISA confirmed that ransomware groups are now actively exploiting a critical VMware vCenter RCE vulnerability that was patched in July 2026, escalating the threat level for unpatched vCenter environments. Organizations still running vulnerable vCenter instances face immediate ransomware exposure, as threat actors have moved from targeted attacks to broader ransomware deployment using this flaw.

Relevance score: 90.0/100

# More from September 16