CVE WatchNov 3, 2026

CVE-2024-37081

The vCenter Server contains multiple local privilege escalation vulnerabilities due to misconfiguration of sudo. An authenticated local user

CVSS

7.8

High

EPSS

5.0%

p92

KEV

—

Exploit Today

0-100

Published: Jun 18, 2024 · Last modified: Nov 3, 2026 · CWE-556

EPSS · 30d

5.0%EPSS · 30 days5.0%

2026-10-172026-11-13

Technical description

The vCenter Server contains multiple local privilege escalation vulnerabilities due to misconfiguration of sudo. An authenticated local user with non-administrative privileges may exploit these issues to elevate privileges to root on vCenter Server Appliance.

Official references

support.broadcom.comhttps://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24453
support.broadcom.comhttps://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24453

Related CVEs

No related CVEs by CWE or product.