<style id="elementor-post-13540">.elementor-13540 .elementor-element.elementor-element-5e8a6f03{margin-top:-20px;margin-bottom:0px;padding:0px 0px 0px 0px;}.elementor-13540 .elementor-element.elementor-element-307656c9 > .elementor-widget-wrap > .elementor-widget:not(.elementor-widget__width-auto):not(.elementor-widget__width-initial):not(:last-child):not(.elementor-absolute){margin-block-end:5px;}.elementor-13540 .elementor-element.elementor-element-307656c9 > .elementor-element-populated{padding:0px 0px 20px 0px;}.elementor-13540 .elementor-element.elementor-element-7e8b7c5f{--divider-border-style:solid;--divider-color:#0000001A;--divider-border-width:1px;}.elementor-13540 .elementor-element.elementor-element-7e8b7c5f .elementor-divider-separator{width:100%;}.elementor-13540 .elementor-element.elementor-element-7e8b7c5f .elementor-divider{padding-block-start:15px;padding-block-end:15px;}.elementor-13540 .elementor-element.elementor-element-7ae75ba{--divider-border-style:solid;--divider-color:#CCCCCC;--divider-border-width:1px;}.elementor-13540 .elementor-element.elementor-element-7ae75ba .elementor-divider-separator{width:50%;margin:0 auto;margin-center:0;}.elementor-13540 .elementor-element.elementor-element-7ae75ba .elementor-divider{text-align:center;padding-block-start:15px;padding-block-end:15px;}.elementor-13540 .elementor-element.elementor-element-ccd19a2{--divider-border-style:solid;--divider-color:#CCCCCC;--divider-border-width:1px;}.elementor-13540 .elementor-element.elementor-element-ccd19a2 .elementor-divider-separator{width:50%;margin:0 auto;margin-center:0;}.elementor-13540 .elementor-element.elementor-element-ccd19a2 .elementor-divider{text-align:center;padding-block-start:15px;padding-block-end:15px;}.elementor-13540 .elementor-element.elementor-element-ef3321c{--divider-border-style:solid;--divider-color:#CCCCCC;--divider-border-width:1px;}.elementor-13540 .elementor-element.elementor-element-ef3321c .elementor-divider-separator{width:50%;margin:0 auto;margin-center:0;}.elementor-13540 .elementor-element.elementor-element-ef3321c .elementor-divider{text-align:center;padding-block-start:15px;padding-block-end:15px;}.elementor-13540 .elementor-element.elementor-element-668a7a8{--divider-border-style:solid;--divider-color:#CCCCCC;--divider-border-width:1px;}.elementor-13540 .elementor-element.elementor-element-668a7a8 .elementor-divider-separator{width:50%;margin:0 auto;margin-center:0;}.elementor-13540 .elementor-element.elementor-element-668a7a8 .elementor-divider{text-align:center;padding-block-start:15px;padding-block-end:15px;}/* Start custom CSS for text-editor, class: .elementor-element-2f816fb6 */.elementor-13540 .elementor-element.elementor-element-2f816fb6 a {
    color: #c00000;
}
.elementor-13540 .elementor-element.elementor-element-2f816fb6 a:hover {
    color: #000000;
}/* End custom CSS */</style>{"id":13540,"date":"2026-01-26T10:59:14","date_gmt":"2026-01-26T09:59:14","guid":{"rendered":"https:\/\/www.infordisa.com\/soc\/?p=13540"},"modified":"2026-01-27T09:22:56","modified_gmt":"2026-01-27T08:22:56","slug":"vulnerabilidad-critica-vmware-vcenter-server-y-cloud-foundation","status":"publish","type":"post","link":"https:\/\/www.infordisa.com\/soc\/vulnerabilidad-critica-vmware-vcenter-server-y-cloud-foundation\/","title":{"rendered":"Vulnerabilidad cr\u00edtica en VMware vCenter Server y Cloud Foundation"},"content":{"rendered":"<div data-elementor-type=\"wp-post\" data-elementor-id=\"13540\" class=\"elementor elementor-13540\" data-elementor-post-type=\"post\">\n\t\t\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-5e8a6f03 elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"5e8a6f03\" data-element_type=\"section\" data-e-type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-307656c9\" data-id=\"307656c9\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-1c0c29a2 elementor-widget elementor-widget-shortcode\" data-id=\"1c0c29a2\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"shortcode.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-shortcode\"><span style=\"color: #c02b23;font-weight: bold\">Cr&iacute;tica <\/span><img loading=\"lazy\" decoding=\"async\" width=\"10\" height=\"10\" src=\"https:\/\/www.infordisa.com\/soc\/imgs\/alerta-5.png\" alt=\"Alerta 5\"\/><\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-2f816fb6 elementor-widget elementor-widget-text-editor\" data-id=\"2f816fb6\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<div><strong><a href=\"https:\/\/support.broadcom.com\/web\/ecx\/support-content-notification\/-\/external\/content\/SecurityAdvisories\/0\/24453\" target=\"_blank\" rel=\"noopener\">Advisory Broadcom Support Portal (ID 24453)<\/a><\/strong><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-7e8b7c5f elementor-widget-divider--view-line elementor-widget elementor-widget-divider\" data-id=\"7e8b7c5f\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"divider.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-divider\">\n\t\t\t<span class=\"elementor-divider-separator\">\n\t\t\t\t\t\t<\/span>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-b1fe96d elementor-widget elementor-widget-text-editor\" data-id=\"b1fe96d\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h2>Descripci&oacute;n<\/h2><p>Se han identificado fallos cr&iacute;ticos de seguridad en VMware vCenter Server y VMware Cloud Foundation que permiten:<\/p><p>&#9888;&#65039; <strong>Ejecuci&oacute;n remota de c&oacute;digo (RCE)<\/strong> enviando paquetes especialmente construidos a vCenter Server.<\/p><p>&#9888;&#65039;<strong> Elevaci&oacute;n de privilegios local<\/strong> en vCenter Server Appliance.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-cb5483d elementor-widget elementor-widget-text-editor\" data-id=\"cb5483d\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<style>\n  .responsive-table {\n    width: 100%;\n    border-collapse: collapse;\n    font-family: Arial, sans-serif;\n  }\n\n  .responsive-table th,\n  .responsive-table td {\n    padding: 10px;\n    border: 1px solid #ddd;\n    text-align: left;\n    vertical-align: top;\n  }\n\n  .responsive-table thead {\n    background-color: #f3f3f3;\n  }\n\n  \/* Responsive *\/\n  @media (max-width: 768px) {\n    .responsive-table thead {\n      display: none;\n    }\n\n    .responsive-table,\n    .responsive-table tbody,\n    .responsive-table tr,\n    .responsive-table td {\n      display: block;\n      width: 100%;\n    }\n\n    .responsive-table tr {\n      margin-bottom: 16px;\n      border: 1px solid #ddd;\n      padding: 12px;\n      background: #fafafa;\n      border-radius: 4px;\n    }\n\n    .responsive-table td {\n      border: none;\n      padding: 6px 0;\n    }\n\n    .responsive-table td::before {\n      content: attr(data-label);\n      font-weight: bold;\n      display: block;\n      color: #555;\n      margin-bottom: 2px;\n    }\n  }\n<\/style>\n\n<table class=\"responsive-table\">\n  <thead>\n    <tr>\n      <th>Identificador<\/th>\n      <th>Tipo<\/th>\n      <th>Riesgo<\/th>\n      <th>Detalle<\/th>\n    <\/tr>\n  <\/thead>\n  <tbody>\n    <tr>\n      <td data-label=\"Identificador\"><strong><a class=\"glossaryLink\"  href=\"https:\/\/www.infordisa.com\/soc\/glosario-definicion\/cve\/\"  data-gt-translate-attributes='[{\"attribute\":\"data-cmtooltip\", \"format\":\"html\"}]' tabindex='0' role='link'>CVE<\/a>-2024-37079<\/strong><\/td>\n      <td data-label=\"Tipo\">Heap overflow &ndash; RCE<\/td>\n      <td data-label=\"Riesgo\"><strong>CVSS 9.8 (Critical)<\/strong><\/td>\n      <td data-label=\"Detalle\">\n        Permite a un atacante con acceso de red ejecutar c&oacute;digo arbitrario remotamente.\n        (<a href=\"https:\/\/support.broadcom.com\/web\/ecx\/support-content-notification\/-\/external\/content\/SecurityAdvisories\/0\/24453\" target=\"_blank\" rel=\"noopener\">Support Portal<\/a>)\n      <\/td>\n    <\/tr>\n    <tr>\n      <td data-label=\"Identificador\"><strong>CVE-2024-37080<\/strong><\/td>\n      <td data-label=\"Tipo\">Heap overflow &ndash; RCE<\/td>\n      <td data-label=\"Riesgo\"><strong>CVSS 9.8 (Critical)<\/strong><\/td>\n      <td data-label=\"Detalle\">\n        Similar a CVE-37079 &ndash; explotaci&oacute;n remota posible.\n        (<a href=\"https:\/\/support.broadcom.com\/web\/ecx\/support-content-notification\/-\/external\/content\/SecurityAdvisories\/0\/24453\" target=\"_blank\" rel=\"noopener\">Support Portal<\/a>)\n      <\/td>\n    <\/tr>\n    <tr>\n      <td data-label=\"Identificador\"><strong><a class=\"glossaryLink\"  href=\"https:\/\/www.infordisa.com\/soc\/glosario-definicion\/cve\/\"  data-gt-translate-attributes='[{\"attribute\":\"data-cmtooltip\", \"format\":\"html\"}]' tabindex='0' role='link'>CVE<\/a>-2024-37081<\/strong><\/td>\n      <td data-label=\"Tipo\">Privilege escalation local<\/td>\n      <td data-label=\"Riesgo\"><strong>CVSS 7.8 (High)<\/strong><\/td>\n      <td data-label=\"Detalle\">\n        Cuenta local no-admin puede escalar a root.\n        (<a href=\"https:\/\/cert.europa.eu\/publications\/security-advisories\/2024-060\/\" target=\"_blank\" rel=\"noopener\">cert.europa.eu<\/a>)\n      <\/td>\n    <\/tr>\n  <\/tbody>\n<\/table>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-b802af4 elementor-widget elementor-widget-text-editor\" data-id=\"b802af4\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>Adem&aacute;s, hay informaci&oacute;n de explotaci&oacute;n en el mundo real, especialmente para <a href=\"https:\/\/nvd.nist.gov\/vuln\/detail\/cve-2024-37079\" target=\"_blank\" rel=\"noopener\">CVE-2024-37079.<\/a><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-7ae75ba elementor-widget-divider--view-line elementor-widget elementor-widget-divider\" data-id=\"7ae75ba\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"divider.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-divider\">\n\t\t\t<span class=\"elementor-divider-separator\">\n\t\t\t\t\t\t<\/span>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-a39ab84 elementor-widget elementor-widget-text-editor\" data-id=\"a39ab84\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h2>Productos afectados<\/h2><ul><li><strong>VMware vCenter Server<\/strong> (todas versiones anteriores a la actualizaci&oacute;n)<\/li><li><strong>VMware Cloud Foundation<\/strong> (que incorpora vCenter)<\/li><\/ul><p>Estos fallos afectan a versiones t&iacute;picas en uso de vCenter Server 7.x y 8.x antes de sus correspondientes parches.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-ccd19a2 elementor-widget-divider--view-line elementor-widget elementor-widget-divider\" data-id=\"ccd19a2\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"divider.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-divider\">\n\t\t\t<span class=\"elementor-divider-separator\">\n\t\t\t\t\t\t<\/span>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-7547ada elementor-widget elementor-widget-text-editor\" data-id=\"7547ada\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h2>Soluci&oacute;n<\/h2><ol><li><strong>Aplicar inmediatamente las actualizaciones oficiales<\/strong> de vCenter Server y Cloud Foundation seg&uacute;n matrix de parches publicado por VMware\/Broadcom.<\/li><li><strong>No existe workaround efectivo<\/strong>: los parches son la &uacute;nica soluci&oacute;n fiable.<\/li><li><strong>Verificar logs y telemetr&iacute;a<\/strong> para actividad an&oacute;mala en el servicio vCenter (conexiones inusuales, ejecuci&oacute;n de comandos inesperados, escaladas de permisos, etc.).<\/li><li>Revisar si los sistemas fueron comprometidos antes de aplicar el parche.<\/li><\/ol>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-ef3321c elementor-widget-divider--view-line elementor-widget elementor-widget-divider\" data-id=\"ef3321c\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"divider.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-divider\">\n\t\t\t<span class=\"elementor-divider-separator\">\n\t\t\t\t\t\t<\/span>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-c7f4210 elementor-widget elementor-widget-text-editor\" data-id=\"c7f4210\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h2>Indicadores de riesgo para SOC<\/h2><p>Monitorear:<\/p><ul><li>Tr&aacute;fico inesperado a la interfaz de administraci&oacute;n (TCP 443) o DCERPC de vCenter.<\/li><li>Eventos de sudo o escalaci&oacute;n de permisos no autorizados.<\/li><li>Se&ntilde;ales de ejecuci&oacute;n de c&oacute;digo o shells inesperados en la m&aacute;quina vCenter.<\/li><\/ul>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-668a7a8 elementor-widget-divider--view-line elementor-widget elementor-widget-divider\" data-id=\"668a7a8\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"divider.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-divider\">\n\t\t\t<span class=\"elementor-divider-separator\">\n\t\t\t\t\t\t<\/span>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-315f007 elementor-widget elementor-widget-text-editor\" data-id=\"315f007\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h2>Referencias<\/h2><p><a href=\"https:\/\/support.broadcom.com\/web\/ecx\/support-content-notification\/-\/external\/content\/SecurityAdvisories\/0\/24453\" target=\"_blank\" rel=\"noopener\">Broadcom Security Advisory <strong>VMSA-2024-0012.1<\/strong> <\/a>&ndash; VMware vCenter Server: heap-overflow y elevaci&oacute;n de privilegios.<\/p><p><a href=\"https:\/\/cert.europa.eu\/publications\/security-advisories\/2024-060\" target=\"_blank\" rel=\"noopener\">CVE-2024-37079 \/ CVE-2024-37080 \/ CVE-2024-37081<\/a> &ndash; vulnerabilidades detalladas.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"<p>Fallos cr&iacute;ticos en VMware vCenter Server y VMware Cloud Foundation que permiten ejecuci&oacute;n remota de c&oacute;digo y elevaci&oacute;n de privilegios.<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"inline_featured_image":false,"footnotes":""},"categories":[4],"tags":[30,147],"class_list":["post-13540","post","type-post","status-publish","format-standard","hentry","category-alertas-de-seguridad","tag-vmware","tag-vulnerabilidad","masonry-post","generate-columns","tablet-grid-50","mobile-grid-100","grid-parent","grid-25"],"acf":[],"yoast_head":"<title>Vulnerabilidad cr\u00edtica en VMware vCenter Server y Cloud Foundation - INFORDISA \/ Security Operations Center<\/title>\n<meta name=\"description\" content=\"Fallos cr\u00edticos en VMware vCenter Server y VMware Cloud Foundation que permiten ejecuci\u00f3n remota de c\u00f3digo y elevaci\u00f3n de privilegios.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.infordisa.com\/soc\/vulnerabilidad-critica-vmware-vcenter-server-y-cloud-foundation\/\" \/>\n<meta property=\"og:locale\" content=\"es_ES\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Vulnerabilidad cr\u00edtica en VMware vCenter Server y Cloud Foundation - INFORDISA \/ Security Operations Center\" \/>\n<meta property=\"og:description\" content=\"Fallos cr\u00edticos en VMware vCenter Server y VMware Cloud Foundation que permiten ejecuci\u00f3n remota de c\u00f3digo y elevaci\u00f3n de privilegios.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.infordisa.com\/soc\/vulnerabilidad-critica-vmware-vcenter-server-y-cloud-foundation\/\" \/>\n<meta property=\"og:site_name\" content=\"INFORDISA \/ Security Operations Center\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/infordisa\/\" \/>\n<meta property=\"article:published_time\" content=\"2026-01-26T09:59:14+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-01-27T08:22:56+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.infordisa.com\/soc\/wp-content\/uploads\/2023\/10\/alerta-VMWare.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1200\" \/>\n\t<meta property=\"og:image:height\" content=\"630\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Jordi Sala\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:image\" content=\"https:\/\/www.infordisa.com\/soc\/wp-content\/uploads\/2023\/10\/alerta-VMWare.jpg\" \/>\n<meta name=\"twitter:creator\" content=\"@infordisa\" \/>\n<meta name=\"twitter:site\" content=\"@infordisa\" \/>\n<meta name=\"twitter:label1\" content=\"Escrito por\" \/>\n\t<meta name=\"twitter:data1\" content=\"Jordi Sala\" \/>\n\t<meta name=\"twitter:label2\" content=\"Tiempo de lectura\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutos\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/vulnerabilidad-critica-vmware-vcenter-server-y-cloud-foundation\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/vulnerabilidad-critica-vmware-vcenter-server-y-cloud-foundation\\\/\"},\"author\":{\"name\":\"Jordi Sala\",\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/#\\\/schema\\\/person\\\/9e7088b9a88f62117d466d94479b2375\"},\"headline\":\"Vulnerabilidad cr\u00edtica en VMware vCenter Server y Cloud Foundation\",\"datePublished\":\"2026-01-26T09:59:14+00:00\",\"dateModified\":\"2026-01-27T08:22:56+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/vulnerabilidad-critica-vmware-vcenter-server-y-cloud-foundation\\\/\"},\"wordCount\":315,\"publisher\":{\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/#organization\"},\"keywords\":[\"VMware\",\"Vulnerabilidad\"],\"articleSection\":[\"Alertas de seguridad\"],\"inLanguage\":\"es\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/vulnerabilidad-critica-vmware-vcenter-server-y-cloud-foundation\\\/\",\"url\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/vulnerabilidad-critica-vmware-vcenter-server-y-cloud-foundation\\\/\",\"name\":\"Vulnerabilidad cr\u00edtica en VMware vCenter Server y Cloud Foundation - INFORDISA \\\/ Security Operations Center\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/#website\"},\"datePublished\":\"2026-01-26T09:59:14+00:00\",\"dateModified\":\"2026-01-27T08:22:56+00:00\",\"description\":\"Fallos cr\u00edticos en VMware vCenter Server y VMware Cloud Foundation que permiten ejecuci\u00f3n remota de c\u00f3digo y elevaci\u00f3n de privilegios.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/vulnerabilidad-critica-vmware-vcenter-server-y-cloud-foundation\\\/#breadcrumb\"},\"inLanguage\":\"es\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/vulnerabilidad-critica-vmware-vcenter-server-y-cloud-foundation\\\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/vulnerabilidad-critica-vmware-vcenter-server-y-cloud-foundation\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Portada\",\"item\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Vulnerabilidad cr\u00edtica en VMware vCenter Server y Cloud Foundation\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/#website\",\"url\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/\",\"name\":\"INFORDISA \\\/ Security Operations Center\",\"description\":\"Portal de Ciberseguridad\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"es\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/#organization\",\"name\":\"INFORDISA \\\/ Security Operations Center\",\"url\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"es\",\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/wp-content\\\/uploads\\\/2021\\\/11\\\/logo-securityoperationscenter.png\",\"contentUrl\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/wp-content\\\/uploads\\\/2021\\\/11\\\/logo-securityoperationscenter.png\",\"width\":400,\"height\":34,\"caption\":\"INFORDISA \\\/ Security Operations Center\"},\"image\":{\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.facebook.com\\\/infordisa\\\/\",\"https:\\\/\\\/x.com\\\/infordisa\",\"https:\\\/\\\/www.linkedin.com\\\/company\\\/infordisa\",\"https:\\\/\\\/www.youtube.com\\\/user\\\/InfordisaTV\",\"https:\\\/\\\/www.instagram.com\\\/infordisa\\\/\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/#\\\/schema\\\/person\\\/9e7088b9a88f62117d466d94479b2375\",\"name\":\"Jordi Sala\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"es\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/8c54ab66e828adf2561016ace1f387fbc25b3e9bb35a24b65c0d3cb64e309c28?s=96&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/8c54ab66e828adf2561016ace1f387fbc25b3e9bb35a24b65c0d3cb64e309c28?s=96&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/8c54ab66e828adf2561016ace1f387fbc25b3e9bb35a24b65c0d3cb64e309c28?s=96&r=g\",\"caption\":\"Jordi Sala\"},\"description\":\"Marketing\",\"sameAs\":[\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/\"],\"url\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/author\\\/jsala\\\/\"}]}<\/script>","yoast_head_json":{"title":"Vulnerabilidad cr\u00edtica en VMware vCenter Server y Cloud Foundation - INFORDISA \/ Security Operations Center","description":"Fallos cr\u00edticos en VMware vCenter Server y VMware Cloud Foundation que permiten ejecuci\u00f3n remota de c\u00f3digo y elevaci\u00f3n de privilegios.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.infordisa.com\/soc\/vulnerabilidad-critica-vmware-vcenter-server-y-cloud-foundation\/","og_locale":"es_ES","og_type":"article","og_title":"Vulnerabilidad cr\u00edtica en VMware vCenter Server y Cloud Foundation - INFORDISA \/ Security Operations Center","og_description":"Fallos cr\u00edticos en VMware vCenter Server y VMware Cloud Foundation que permiten ejecuci\u00f3n remota de c\u00f3digo y elevaci\u00f3n de privilegios.","og_url":"https:\/\/www.infordisa.com\/soc\/vulnerabilidad-critica-vmware-vcenter-server-y-cloud-foundation\/","og_site_name":"INFORDISA \/ Security Operations Center","article_publisher":"https:\/\/www.facebook.com\/infordisa\/","article_published_time":"2026-01-26T09:59:14+00:00","article_modified_time":"2026-01-27T08:22:56+00:00","og_image":[{"width":1200,"height":630,"url":"https:\/\/www.infordisa.com\/soc\/wp-content\/uploads\/2023\/10\/alerta-VMWare.jpg","type":"image\/jpeg"}],"author":"Jordi Sala","twitter_card":"summary_large_image","twitter_image":"https:\/\/www.infordisa.com\/soc\/wp-content\/uploads\/2023\/10\/alerta-VMWare.jpg","twitter_creator":"@infordisa","twitter_site":"@infordisa","twitter_misc":{"Escrito por":"Jordi Sala","Tiempo de lectura":"2 minutos"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.infordisa.com\/soc\/vulnerabilidad-critica-vmware-vcenter-server-y-cloud-foundation\/#article","isPartOf":{"@id":"https:\/\/www.infordisa.com\/soc\/vulnerabilidad-critica-vmware-vcenter-server-y-cloud-foundation\/"},"author":{"name":"Jordi Sala","@id":"https:\/\/www.infordisa.com\/soc\/#\/schema\/person\/9e7088b9a88f62117d466d94479b2375"},"headline":"Vulnerabilidad cr\u00edtica en VMware vCenter Server y Cloud Foundation","datePublished":"2026-01-26T09:59:14+00:00","dateModified":"2026-01-27T08:22:56+00:00","mainEntityOfPage":{"@id":"https:\/\/www.infordisa.com\/soc\/vulnerabilidad-critica-vmware-vcenter-server-y-cloud-foundation\/"},"wordCount":315,"publisher":{"@id":"https:\/\/www.infordisa.com\/soc\/#organization"},"keywords":["VMware","Vulnerabilidad"],"articleSection":["Alertas de seguridad"],"inLanguage":"es"},{"@type":"WebPage","@id":"https:\/\/www.infordisa.com\/soc\/vulnerabilidad-critica-vmware-vcenter-server-y-cloud-foundation\/","url":"https:\/\/www.infordisa.com\/soc\/vulnerabilidad-critica-vmware-vcenter-server-y-cloud-foundation\/","name":"Vulnerabilidad cr\u00edtica en VMware vCenter Server y Cloud Foundation - INFORDISA \/ Security Operations Center","isPartOf":{"@id":"https:\/\/www.infordisa.com\/soc\/#website"},"datePublished":"2026-01-26T09:59:14+00:00","dateModified":"2026-01-27T08:22:56+00:00","description":"Fallos cr\u00edticos en VMware vCenter Server y VMware Cloud Foundation que permiten ejecuci\u00f3n remota de c\u00f3digo y elevaci\u00f3n de privilegios.","breadcrumb":{"@id":"https:\/\/www.infordisa.com\/soc\/vulnerabilidad-critica-vmware-vcenter-server-y-cloud-foundation\/#breadcrumb"},"inLanguage":"es","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.infordisa.com\/soc\/vulnerabilidad-critica-vmware-vcenter-server-y-cloud-foundation\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.infordisa.com\/soc\/vulnerabilidad-critica-vmware-vcenter-server-y-cloud-foundation\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Portada","item":"https:\/\/www.infordisa.com\/soc\/"},{"@type":"ListItem","position":2,"name":"Vulnerabilidad cr\u00edtica en VMware vCenter Server y Cloud Foundation"}]},{"@type":"WebSite","@id":"https:\/\/www.infordisa.com\/soc\/#website","url":"https:\/\/www.infordisa.com\/soc\/","name":"INFORDISA \/ Security Operations Center","description":"Portal de Ciberseguridad","publisher":{"@id":"https:\/\/www.infordisa.com\/soc\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.infordisa.com\/soc\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"es"},{"@type":"Organization","@id":"https:\/\/www.infordisa.com\/soc\/#organization","name":"INFORDISA \/ Security Operations Center","url":"https:\/\/www.infordisa.com\/soc\/","logo":{"@type":"ImageObject","inLanguage":"es","@id":"https:\/\/www.infordisa.com\/soc\/#\/schema\/logo\/image\/","url":"https:\/\/www.infordisa.com\/soc\/wp-content\/uploads\/2021\/11\/logo-securityoperationscenter.png","contentUrl":"https:\/\/www.infordisa.com\/soc\/wp-content\/uploads\/2021\/11\/logo-securityoperationscenter.png","width":400,"height":34,"caption":"INFORDISA \/ Security Operations Center"},"image":{"@id":"https:\/\/www.infordisa.com\/soc\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/infordisa\/","https:\/\/x.com\/infordisa","https:\/\/www.linkedin.com\/company\/infordisa","https:\/\/www.youtube.com\/user\/InfordisaTV","https:\/\/www.instagram.com\/infordisa\/"]},{"@type":"Person","@id":"https:\/\/www.infordisa.com\/soc\/#\/schema\/person\/9e7088b9a88f62117d466d94479b2375","name":"Jordi Sala","image":{"@type":"ImageObject","inLanguage":"es","@id":"https:\/\/secure.gravatar.com\/avatar\/8c54ab66e828adf2561016ace1f387fbc25b3e9bb35a24b65c0d3cb64e309c28?s=96&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/8c54ab66e828adf2561016ace1f387fbc25b3e9bb35a24b65c0d3cb64e309c28?s=96&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/8c54ab66e828adf2561016ace1f387fbc25b3e9bb35a24b65c0d3cb64e309c28?s=96&r=g","caption":"Jordi Sala"},"description":"Marketing","sameAs":["https:\/\/www.infordisa.com\/soc\/"],"url":"https:\/\/www.infordisa.com\/soc\/author\/jsala\/"}]}},"_links":{"self":[{"href":"https:\/\/www.infordisa.com\/soc\/wp-json\/wp\/v2\/posts\/13540","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.infordisa.com\/soc\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.infordisa.com\/soc\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.infordisa.com\/soc\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.infordisa.com\/soc\/wp-json\/wp\/v2\/comments?post=13540"}],"version-history":[{"count":5,"href":"https:\/\/www.infordisa.com\/soc\/wp-json\/wp\/v2\/posts\/13540\/revisions"}],"predecessor-version":[{"id":13553,"href":"https:\/\/www.infordisa.com\/soc\/wp-json\/wp\/v2\/posts\/13540\/revisions\/13553"}],"wp:attachment":[{"href":"https:\/\/www.infordisa.com\/soc\/wp-json\/wp\/v2\/media?parent=13540"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.infordisa.com\/soc\/wp-json\/wp\/v2\/categories?post=13540"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.infordisa.com\/soc\/wp-json\/wp\/v2\/tags?post=13540"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}