Vendor
Broadcom
As of , 5 Broadcom vulnerabilities are on CISA's list of exploited vulnerabilities, 1 of them used in ransomware campaigns; 3 were added in 2026. Patch first: CVE-2026-59310.
Patch first
| # | Vulnerability | Product | Our group | Listed | Deadline | EPSS |
|---|---|---|---|---|---|---|
| 1 | CVE-2026-59310Path Traversal | Broadcom VMware vCenter | Patch nowForensic triage required by CISA; ransomware use, listed within a year | 0.03 | ||
| 2 | CVE-2026-22719Command Injection | Broadcom VMware Aria Operations | Patch soon | 0.18 | ||
| 3 | CVE-2024-37079Out-of-bounds Write | Broadcom VMware vCenter Server | Patch soon | 0.22 | ||
| 4 | CVE-2025-41244Privilege Defined with Unsafe Actions | Broadcom VMware Aria Operations and VMware Tools | Patch soon | 0.08 | ||
| 5 | CVE-2025-1976Code Injection | Broadcom Brocade Fabric OS | Patch soon | 0.01 |
Products
- Brocade Fabric OS1 entry
- VMware Aria Operations1 entry
- VMware Aria Operations and VMware Tools1 entry
- VMware vCenter1 entry
- VMware vCenter Server1 entry
Added each year
Show the numbers
| Period | entries added |
|---|---|
| 2025 | 2 |
| 2026 | 3 |