Proof of concept exploit released for critical VMware VMXNET3 security flaw

Howl.link reported on October 8 that details and a public proof-of-concept exploit have been released for a security flaw in VMware Workstation and Fusion. The vulnerability, tracked as CVE-2026-59346, affects the VMXNET3 virtual network adapter. [1]

According to reports from Cyber Press and SQ Magazine, the critical flaw enables guest-to-host execution and virtual machine escapes. Cyber Press noted that the release of the proof-of-concept exploit allows code execution from a guest virtual machine on the host system. [7][8]

Related security disclosures have also emerged for other software platforms. CyberSecurityNews reported that hackers are actively exploiting a critical Citrix NetScaler flaw to steal configuration data and deploy web shells. Separately, The Hacker News reported that attackers attempted to exploit an arbitrary file access flaw in Atlassian Data Center products, tracked as CVE-2026-21589 with a CVSS score of 9.3, within two hours of public disclosure. [5][6]

Additional proof-of-concept exploits were published for other applications this week. GBHackers News reported on unpatched remote code execution flaws in LMCache and Zammad, while CyberSecurityNews noted a separate proof-of-concept release for a critical Atlassian flaw that can grant administrative access to Jira. [2][3][4]