Is VMware vCenter Server 7.0.3.02500 affected?

CVSS 9.8

2 known vulnerabilities affect 7.0.3.02500 (highest CVSS 9.8).

Your branch 7.0 has reached end of life (Oct 2, 2025).

7.0.3.02500 is the latest release of its track.

A newer release line is out: 9.1.1.0100.

Vulnerabilities affecting 7.0.3.02500

9.8
CVE-2026-59309 VMware vCenter contains an authentication bypass vulnerability in the VMware Directory Service. A malicious actor with network access to vCenter may exploit this issue to bypass authentication and… fixed in 8.0
9.8
CVE-2026-59310 VMware vCenter contains a directory traversal vulnerability in the Syslog server. A malicious actor with network access to vCenter may exploit this issue to execute arbitrary code. KEV · fixed in 8.0