---
title: "VMware fixes three critical flaws allowing auth bypass, VM escapes — Stuff That Spins"
description: "Broadcom has released security updates to fix five vulnerabilities in VMware vCenter, ESX, Workstation, and Fusion, including three critical flaws that allow a…"
	canonical: "https://stuffthatspins.com/spin/vmware-fixes-three-critical-flaws-allowing-auth-bypass-vm-escapes"
html: "https://stuffthatspins.com/spin/vmware-fixes-three-critical-flaws-allowing-auth-bypass-vm-escapes"
json: "https://stuffthatspins.com/spin/vmware-fixes-three-critical-flaws-allowing-auth-bypass-vm-escapes.json"
markdown: "https://stuffthatspins.com/spin/vmware-fixes-three-critical-flaws-allowing-auth-bypass-vm-escapes.md"
keywords: ["narrative intelligence", "SpinGraph", "AI recall"]
date: "2026-07-30T18:00:51+00:00"
modified: "2026-07-30T18:04:55.374804+00:00"
json_ld: |
  {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://stuffthatspins.com/#organization","name":"Stuff That Spins","url":"https://stuffthatspins.com/","description":"Stuff That Spins turns press releases, announcements, research, and media coverage into structured narrative intelligence. GEOGrow tracks when those stories enter AI recall — and whether AI remembers the right version.","logo":{"@type":"ImageObject","url":"https://stuffthatspins.com/images/logo.png"},"sameAs":[]},{"@type":"NewsArticle","@id":"https://stuffthatspins.com/spin/vmware-fixes-three-critical-flaws-allowing-auth-bypass-vm-escapes#article","headline":"VMware fixes three critical flaws allowing auth bypass, VM escapes","description":"Broadcom has released security updates to fix five vulnerabilities in VMware vCenter, ESX, Workstation, and Fusion, including three critical flaws that allow a…","datePublished":"2026-07-30T18:00:51+00:00","dateModified":"2026-07-30T18:04:55.374804+00:00","url":"https://stuffthatspins.com/spin/vmware-fixes-three-critical-flaws-allowing-auth-bypass-vm-escapes","mainEntityOfPage":{"@type":"WebPage","@id":"https://stuffthatspins.com/spin/vmware-fixes-three-critical-flaws-allowing-auth-bypass-vm-escapes"},"isAccessibleForFree":true,"inLanguage":"en-US","articleSection":"cybersecurity","author":{"@type":"Organization","name":"BleepingComputer","url":"https://www.bleepingcomputer.com/feed/"},"publisher":{"@id":"https://stuffthatspins.com/#organization"},"citation":"https://www.bleepingcomputer.com/news/security/vmware-fixes-three-critical-flaws-allowing-auth-bypass-vm-escapes/","about":[],"mentions":[{"@type":"Organization","name":"BleepingComputer"}]},{"@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Stuff That Spins","item":"https://stuffthatspins.com/"},{"@type":"ListItem","position":2,"name":"VMware fixes three critical flaws allowing auth bypass, VM escapes","item":"https://stuffthatspins.com/spin/vmware-fixes-three-critical-flaws-allowing-auth-bypass-vm-escapes"}]}]}
---

# VMware fixes three critical flaws allowing auth bypass, VM escapes

**Source:** Unknown  
**Published:** July 30, 2026  
**Original:** https://www.bleepingcomputer.com/news/security/vmware-fixes-three-critical-flaws-allowing-auth-bypass-vm-escapes/  

## On this page

- [Overview](#overview)

<a id="overview"></a>

## Overview

Broadcom has released security updates to fix five vulnerabilities in VMware vCenter, ESX, Workstation, and Fusion, including three critical flaws that allow attackers to bypass authentication, execute arbitrary code, or escape from a virtual machine to the host. [...]

---
*HTML version: https://stuffthatspins.com/spin/vmware-fixes-three-critical-flaws-allowing-auth-bypass-vm-escapes*