Is VMware vCenter Server 9.1 affected?

CVSS 9.8

2 known vulnerabilities affect 9.1 (highest CVSS 9.8).

5 newer releases in its track, up to 9.1.1.0100. What changed up to 9.1.1.0100

Vulnerabilities affecting 9.1

9.8
CVE-2026-59309 VMware vCenter contains an authentication bypass vulnerability in the VMware Directory Service. A malicious actor with network access to vCenter may exploit this issue to bypass authentication and… fixed in 9.1.0.0300
9.8
CVE-2026-59310 VMware vCenter contains a directory traversal vulnerability in the Syslog server. A malicious actor with network access to vCenter may exploit this issue to execute arbitrary code. KEV · fixed in 9.1.0.0300