PoC Exploit Released for Critical VMware Flaw That Could Enable Guest-to-Host Code Execution

Security researcher Stan S, known as 0xCyberstan, has released a proof-of-concept exploit for CVE-2026-59346 , a critical VMware vulnerability that could allow an attacker with administrative privileges inside a virtual machine to execute code on its host. The published exploit demonstrates a host-side crash, not a completed code-execution chain. Broadcom assigned the vulnerability a CVSSv3 score of 9.3, while the Zero Day Initiative rated it 7.5. Broadcom released fixes for…