--- title: Critical VMware vCenter Server bug under attack | daily.dev description: A critical vulnerability (CVE-2024-37079) in VMware vCenter Server is being actively exploited, over a year after Broadcom released a patch in June 2024. The... canonical: https://daily.dev/posts/critical-vmware-vcenter-server-bug-under-attack-jsn8kfcbc twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Critical VMware vCenter Server bug under attack | daily.dev og:description: A critical vulnerability (CVE-2024-37079) in VMware vCenter Server is being actively exploited, over a year after Broadcom released a patch in June 2024. The... og:url: https://daily.dev/posts/critical-vmware-vcenter-server-bug-under-attack-jsn8kfcbc og:image: https://api.daily.dev/og/posts/Jsn8kFcBC.png og:image:alt: Critical VMware vCenter Server bug under attack og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Critical VMware vCenter Server bug under attack **[The Register](https://daily.dev/sources/theregister)** · 3 min read · 0 upvotes · 0 comments ## Summary A critical vulnerability (CVE-2024-37079) in VMware vCenter Server is being actively exploited, over a year after Broadcom released a patch in June 2024. The flaw, rated 9.8/10 CVSS, is an out-of-bounds write bug in the DCERPC protocol implementation that allows remote code execution via specially crafted network packets. CISA added it to the Known Exploited Vulnerabilities catalog, requiring federal agencies to patch by February 13. Security researchers note that virtualization infrastructure is a prime target for both state-sponsored and financially motivated attackers, with previous vCenter vulnerabilities exploited by China-nexus threat groups. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Similar posts on daily.dev - [CISA: Critical VMware RCE flaw now exploited by ransomware gangs](https://daily.dev/posts/cisa-critical-vmware-rce-flaw-now-exploited-by-ransomware-gangs-ofrnqjulv) · BleepingComputer · 1 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#cyber](https://daily.dev/tags/cyber), [#vulnerability](https://daily.dev/tags/vulnerability), [#vmware](https://daily.dev/tags/vmware) [View this post on daily.dev](https://daily.dev/posts/critical-vmware-vcenter-server-bug-under-attack-jsn8kfcbc) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Critical VMware vCenter Server bug under attack","url":"https://daily.dev/posts/critical-vmware-vcenter-server-bug-under-attack-jsn8kfcbc","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/critical-vmware-vcenter-server-bug-under-attack-jsn8kfcbc"},"datePublished":"2026-01-23T22:08:44.313Z","dateModified":"2026-01-24T08:41:59.539Z","description":"A critical vulnerability (CVE-2024-37079) in VMware vCenter Server is being actively exploited, over a year after Broadcom released a patch in June 2024. The...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/915cc1962285428436ad6361bd72c304?_a=AQAEulh","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/915cc1962285428436ad6361bd72c304?_a=AQAEulh","isAccessibleForFree":true,"articleSection":"The Register","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"The Register","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/66aa2113fdad463992ffcbf0e8963fda","url":"https://daily.dev/sources/theregister"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/critical-vmware-vcenter-server-bug-under-attack-jsn8kfcbc","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"security,cyber,vulnerability,vmware","timeRequired":"PT3M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"The Register","item":"https://daily.dev/sources/theregister"},{"@type":"ListItem","position":3,"name":"Critical VMware vCenter Server bug under attack"}]} ```