Threat actors are actively exploiting CVE-2026-59310, a critical directory-traversal vulnerability in VMware vCenter Server. This flaw, with a CVSS score of 9.8, allows unauthenticated attackers with network access to execute arbitrary code and gain persistent remote access. Organizations must apply patches immediately and investigate for signs of compromise, as patching alone may not fully mitigate the threat.