Deserialization of untrusted data in VMware vCenter Server
Priority MEDIUM 63CWE-502Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- High
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Code execution
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-502.
Summary
The vCenter Server contains an unsafe deserialisation vulnerability in the PSC (Platform services controller). A malicious actor with admin access on vCenter server may exploit this issue to execute arbitrary code on the underlying operating system that hosts the vCenter Server.
Why it matters now
EPSS 0.31076 98th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | VMware vCenter Server | VMware vCenter Server 6.5 prior to U3u | — | No fix listed | CNA |
- VMware vCenter Server Vendor— Affected VMware vCenter Server 6.5 prior to U3u Fixed in — No fix listed CNA
CPE configurations NVD · 28
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:vmware:vcenter_server:*:*:*:*:*:*:*:* | before 6.5 | Vulnerable | VMware |
| cpe:2.3:a:vmware:vcenter_server:6.5:-:*:*:*:*:*:* | 6.5 | Vulnerable | VMware |
| cpe:2.3:a:vmware:vcenter_server:6.5:a:*:*:*:*:*:* | 6.5 a | Vulnerable | VMware |
| cpe:2.3:a:vmware:vcenter_server:6.5:b:*:*:*:*:*:* | 6.5 b | Vulnerable | VMware |
| cpe:2.3:a:vmware:vcenter_server:6.5:c:*:*:*:*:*:* | 6.5 c | Vulnerable | VMware |
| cpe:2.3:a:vmware:vcenter_server:6.5:d:*:*:*:*:*:* | 6.5 d | Vulnerable | VMware |
| cpe:2.3:a:vmware:vcenter_server:6.5:update1:*:*:*:*:*:* | 6.5 update1 | Vulnerable | VMware |
| cpe:2.3:a:vmware:vcenter_server:6.5:update1b:*:*:*:*:*:* | 6.5 update1b | Vulnerable | VMware |
| cpe:2.3:a:vmware:vcenter_server:6.5:update1c:*:*:*:*:*:* | 6.5 update1c | Vulnerable | VMware |
| cpe:2.3:a:vmware:vcenter_server:6.5:update1d:*:*:*:*:*:* | 6.5 update1d | Vulnerable | VMware |
- cpe:2.3:a:vmware:vcenter_server:*:*:*:*:*:*:*:* Versions before 6.5 Vulnerable ·VMware
- cpe:2.3:a:vmware:vcenter_server:6.5:-:*:*:*:*:*:* Versions 6.5 Vulnerable ·VMware
- cpe:2.3:a:vmware:vcenter_server:6.5:a:*:*:*:*:*:* Versions 6.5 a Vulnerable ·VMware
- cpe:2.3:a:vmware:vcenter_server:6.5:b:*:*:*:*:*:* Versions 6.5 b Vulnerable ·VMware
- cpe:2.3:a:vmware:vcenter_server:6.5:c:*:*:*:*:*:* Versions 6.5 c Vulnerable ·VMware
- cpe:2.3:a:vmware:vcenter_server:6.5:d:*:*:*:*:*:* Versions 6.5 d Vulnerable ·VMware
- cpe:2.3:a:vmware:vcenter_server:6.5:update1:*:*:*:*:*:* Versions 6.5 update1 Vulnerable ·VMware
- cpe:2.3:a:vmware:vcenter_server:6.5:update1b:*:*:*:*:*:* Versions 6.5 update1b Vulnerable ·VMware
- cpe:2.3:a:vmware:vcenter_server:6.5:update1c:*:*:*:*:*:* Versions 6.5 update1c Vulnerable ·VMware
- cpe:2.3:a:vmware:vcenter_server:6.5:update1d:*:*:*:*:*:* Versions 6.5 update1d Vulnerable ·VMware
Show 18 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:vmware:vcenter_server:6.5:update1e:*:*:*:*:*:* | 6.5 update1e | Vulnerable | VMware |
| cpe:2.3:a:vmware:vcenter_server:6.5:update1g:*:*:*:*:*:* | 6.5 update1g | Vulnerable | VMware |
| cpe:2.3:a:vmware:vcenter_server:6.5:update2:*:*:*:*:*:* | 6.5 update2 | Vulnerable | VMware |
| cpe:2.3:a:vmware:vcenter_server:6.5:update2b:*:*:*:*:*:* | 6.5 update2b | Vulnerable | VMware |
| cpe:2.3:a:vmware:vcenter_server:6.5:update2c:*:*:*:*:*:* | 6.5 update2c | Vulnerable | VMware |
| cpe:2.3:a:vmware:vcenter_server:6.5:update2d:*:*:*:*:*:* | 6.5 update2d | Vulnerable | VMware |
| cpe:2.3:a:vmware:vcenter_server:6.5:update2g:*:*:*:*:*:* | 6.5 update2g | Vulnerable | VMware |
| cpe:2.3:a:vmware:vcenter_server:6.5:update3:*:*:*:*:*:* | 6.5 update3 | Vulnerable | VMware |
| cpe:2.3:a:vmware:vcenter_server:6.5:update3d:*:*:*:*:*:* | 6.5 update3d | Vulnerable | VMware |
| cpe:2.3:a:vmware:vcenter_server:6.5:update3f:*:*:*:*:*:* | 6.5 update3f | Vulnerable | VMware |
| cpe:2.3:a:vmware:vcenter_server:6.5:update3k:*:*:*:*:*:* | 6.5 update3k | Vulnerable | VMware |
| cpe:2.3:a:vmware:vcenter_server:6.5:update3n:*:*:*:*:*:* | 6.5 update3n | Vulnerable | VMware |
| cpe:2.3:a:vmware:vcenter_server:6.5:update3p:*:*:*:*:*:* | 6.5 update3p | Vulnerable | VMware |
| cpe:2.3:a:vmware:vcenter_server:6.5:update3q:*:*:*:*:*:* | 6.5 update3q | Vulnerable | VMware |
| cpe:2.3:a:vmware:vcenter_server:6.5:update3r:*:*:*:*:*:* | 6.5 update3r | Vulnerable | VMware |
| cpe:2.3:a:vmware:vcenter_server:6.5:update3s:*:*:*:*:*:* | 6.5 update3s | Vulnerable | VMware |
| cpe:2.3:a:vmware:vcenter_server:6.5:update3t:*:*:*:*:*:* | 6.5 update3t | Vulnerable | VMware |
| cpe:2.3:a:vmware:vcenter_server:6.5:update3u:*:*:*:*:*:* | 6.5 update3u | Vulnerable | VMware |
- cpe:2.3:a:vmware:vcenter_server:6.5:update1e:*:*:*:*:*:* Versions 6.5 update1e Vulnerable ·VMware
- cpe:2.3:a:vmware:vcenter_server:6.5:update1g:*:*:*:*:*:* Versions 6.5 update1g Vulnerable ·VMware
- cpe:2.3:a:vmware:vcenter_server:6.5:update2:*:*:*:*:*:* Versions 6.5 update2 Vulnerable ·VMware
- cpe:2.3:a:vmware:vcenter_server:6.5:update2b:*:*:*:*:*:* Versions 6.5 update2b Vulnerable ·VMware
- cpe:2.3:a:vmware:vcenter_server:6.5:update2c:*:*:*:*:*:* Versions 6.5 update2c Vulnerable ·VMware
- cpe:2.3:a:vmware:vcenter_server:6.5:update2d:*:*:*:*:*:* Versions 6.5 update2d Vulnerable ·VMware
- cpe:2.3:a:vmware:vcenter_server:6.5:update2g:*:*:*:*:*:* Versions 6.5 update2g Vulnerable ·VMware
- cpe:2.3:a:vmware:vcenter_server:6.5:update3:*:*:*:*:*:* Versions 6.5 update3 Vulnerable ·VMware
- cpe:2.3:a:vmware:vcenter_server:6.5:update3d:*:*:*:*:*:* Versions 6.5 update3d Vulnerable ·VMware
- cpe:2.3:a:vmware:vcenter_server:6.5:update3f:*:*:*:*:*:* Versions 6.5 update3f Vulnerable ·VMware
- cpe:2.3:a:vmware:vcenter_server:6.5:update3k:*:*:*:*:*:* Versions 6.5 update3k Vulnerable ·VMware
- cpe:2.3:a:vmware:vcenter_server:6.5:update3n:*:*:*:*:*:* Versions 6.5 update3n Vulnerable ·VMware
- cpe:2.3:a:vmware:vcenter_server:6.5:update3p:*:*:*:*:*:* Versions 6.5 update3p Vulnerable ·VMware
- cpe:2.3:a:vmware:vcenter_server:6.5:update3q:*:*:*:*:*:* Versions 6.5 update3q Vulnerable ·VMware
- cpe:2.3:a:vmware:vcenter_server:6.5:update3r:*:*:*:*:*:* Versions 6.5 update3r Vulnerable ·VMware
- cpe:2.3:a:vmware:vcenter_server:6.5:update3s:*:*:*:*:*:* Versions 6.5 update3s Vulnerable ·VMware
- cpe:2.3:a:vmware:vcenter_server:6.5:update3t:*:*:*:*:*:* Versions 6.5 update3t Vulnerable ·VMware
- cpe:2.3:a:vmware:vcenter_server:6.5:update3u:*:*:*:*:*:* Versions 6.5 update3u Vulnerable ·VMware
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2022-31680
- 2026-10-03 Alias added: GHSA-5g3f-j849-rm6p
References
More VMware Vcenter Server vulnerabilities
- TI-2026-42442 vCenter directory-traversal vulnerability KEVCVSS 3.1CRITICAL 9.8
- TI-2024-26040 Privilege escalation in VMware vCenter Server KEVCVSS 3.1CRITICAL 9.8
- TI-2024-26039 Heap-overflow in VMware vCenter Server KEVCVSS 3.1CRITICAL 9.8
- TI-2024-24610 Out-of-bounds write in VMware vCenter Server KEVCVSS 3.1CRITICAL 9.8
- TI-2023-16914 VMware vCenter Server Out-of-Bounds Write Vulnerability KEVCVSS 3.1CRITICAL 9.8
- TI-2021-05049 Path traversal in VMware vCenter Server, VMware Cloud Foundation KEVCVSS 3.1CRITICAL 9.8
Sources
- CVE-2022-31680 · CVE Program
- CVE-2022-31680 · NVD
- FIRST EPSS
- GHSA-5g3f-j849-rm6p · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences