Is VMware vCenter Server 9.1.0.0200 affected?
Jul 13, 2026 · Release notes ↗
2 known vulnerabilities affect 9.1.0.0200 (highest CVSS 9.8).
3 newer releases in its track, up to 9.1.1.0100. What changed up to 9.1.1.0100
Vulnerabilities affecting 9.1.0.0200
- 9.8 CVE-2026-59309 VMware vCenter contains an authentication bypass vulnerability in the VMware Directory Service. A malicious actor with network access to vCenter may exploit this issue to bypass authentication and… fixed in 9.1.0.0300
- 9.8 CVE-2026-59310 VMware vCenter contains a directory traversal vulnerability in the Syslog server. A malicious actor with network access to vCenter may exploit this issue to execute arbitrary code. KEV · fixed in 9.1.0.0300
Newer releases
| 9.1.1.0100 | Oct 12, 2026 | 9.1.0.0200 → 9.1.1.0100 |
| 9.1.1.0 | Sep 3, 2026 | 9.1.0.0200 → 9.1.1.0 |
| 9.1.0.0300 | Jul 29, 2026 | 9.1.0.0200 → 9.1.0.0300 |