CVE Watch3 nov 2026

CVE-2024-37081

The vCenter Server contains multiple local privilege escalation vulnerabilities due to misconfiguration of sudo. An authenticated local user

CVSS

7.8

Alto

EPSS

5.0%

p92

KEV

—

Exploit Today

0-100

Publicado: 18 jun 2024 · Última mod.: 3 nov 2026 · CWE-556

EPSS · 30d

5.0%EPSS · 30 días5.0%

2026-10-172026-11-13

Descripción técnica

The vCenter Server contains multiple local privilege escalation vulnerabilities due to misconfiguration of sudo. An authenticated local user with non-administrative privileges may exploit these issues to elevate privileges to root on vCenter Server Appliance.

Referencias oficiales

support.broadcom.comhttps://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24453
support.broadcom.comhttps://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24453

CVEs relacionados

Sin CVEs relacionados por CWE o producto.