Post
jark after dark
jarkafterdark.com
did:plc:letgghriwshm3nehdhns76ha
the flaw is CVE-2026-59310, rated 9.8 out of 10. it lives in vcenter's syslog server, the component collecting logs, and it turns a quiet logging service into an open door. an attacker on the network can walk through it and run code as root. no login. no credentials. no interaction.
2026-09-03T06:05:05.023Z