Broadcom VMware vCenter path traversal that lets a network-adjacent attacker execute code. CISA added it to KEV on Aug 18 with an Aug 21 federal due date and marks known ransomware campaign use. A separate dark-web monitor also claimed an exploit for sale (~$10k) on Oct 13; treat that as secondary noise. Patch vCenter and keep it off the public internet.