Vendor
Broadcom vulnerabilities
Updated . Rebuilt every hour.
Junglewise Threat Intelligence has tracked 40 vulnerabilities in Broadcom: 0 in the last 7 days and 10 in the last 90 days, 14 of them critical and 12 exploited in the wild. The most recent, CVE-2026-101034, was published on 27 October 2026. 2 vulnerabilities in the last four weeks, down 71% on the four before (7). 5 technologies have a page of their own.
- Last 7 days
- 0
- Last 90 days
- 10
- Critical, all time
- 14
- Exploited in the wild
- 12
About Broadcom
A global technology leader that designs, develops, and supplies semiconductor and infrastructure software solutions, including the Spring framework via its VMware Tanzu division.
Broadcom technologies
Latest Broadcom vulnerabilities
- CVE-2026-101034: Broadcom GSS Deployment Server hardcoded key credential decryptioninfo
- CVE-2026-78116: Broadcom AFBR-S50 sensor driver double-completion of RTIO submissionmediumCVSS 5.2
- CVE-2023-5649: An Improper Input Validation vulnerability for the registered case credentials in Brocade ASCG before v3.0 could allow…mediumCVSS 5.5EPSS 0.1%
- CVE-2026-85417: Brocade SANnav credential exposure in logging subsysteminfoEPSS 0.2%
- CVE-2026-14441: Broadcom Brocade SANnav comparison logic flaw in cache key handlinginfoEPSS 0.4%
- CVE-2026-82371: Brocade SANnav plaintext exposure of authentication credentials in logsinfoEPSS 0.1%
- CVE-2026-67221: RabbitMQ AMQP 1.0 shovel password exposure in status APIinfoEPSS 0.2%
- CVE-2026-67220: RabbitMQ JMS topic exchange atom exhaustion denial of serviceinfoEPSS 0.3%
- CVE-2026-66079: RabbitMQ AMQP 1.0 array32 denial of serviceinfoEPSS 0.3%
- CVE-2026-63335: RabbitMQ Java client denial of service via malformed AMQP framemediumCVSS 4EPSS 0.5%
- CVE-2026-41709: VMware ESX insufficient logging vulnerabilitycriticalexploited in the wildCVSS 2.7EPSS 0.3%
- CVE-2026-59310: VMware vCenter directory traversal in Syslog servercriticalexploited in the wildCVSS 9.8EPSS 2.6%
- CVE-2026-59327: Spring Tools for Eclipse cleartext storage of DevTools secretmediumCVSS 4.4
- CVE-2026-59326: Spring Boot language server credential disclosure in proxy logslowCVSS 3.3
- CVE-2026-47873: Spring Tools for Eclipse insecure port binding in Boot Dashboard Docker integrationhighCVSS 8
- CVE-2026-47858: Spring Tools JMX remote code execution in live information modehighCVSS 8
- CVE-2026-57219: RabbitMQ information disclosure in management API auth endpointinfoCVSS 8.7
- CVE-2026-57216: RabbitMQ authentication bypass for loopback-restricted usersmediumCVSS 6.8
- CVE-2026-57215: RabbitMQ incorrect authorization in amq.rabbitmq.reply-to bindingsinfoCVSS 7
- CVE-2026-57212: RabbitMQ resource exhaustion in management HTTP API via oversized JSONinfoCVSS 7.1
- CVE-2026-47838: VMware Spring Security user impersonation in SubjectDnX509PrincipalExtractormediumCVSS 6.8EPSS 0.2%
- CVE-2026-8370: Broadcom Automic Automation Agent Unix privilege escalationinfoCVSS 8.5
- CVE-2026-41713: VMware Spring AI prompt injection in conversation memoryhighCVSS 8.2EPSS 0.4%
- CVE-2026-41712: VMware Spring AI data exposure in chat memory componenthighCVSS 7.5EPSS 0.4%
- CVE-2026-22741: Spring Framework cache poisoning in static resource resolutionlowCVSS 3.1EPSS 0.2%
Most severe Broadcom vulnerabilities
Exploited in the wild first, then by severity and CVSS score.
- CVE-2024-37079: Broadcom VMware vCenter Server out-of-bounds write in DCERPC protocolcriticalexploited in the wildCVSS 9.8EPSS 82.0%
- CVE-2026-59310: VMware vCenter directory traversal in Syslog servercriticalexploited in the wildCVSS 9.8EPSS 2.6%
- CVE-2024-38812: VMware vCenter Server Heap-Based Buffer Overflow Vulnerabilitycriticalexploited in the wildCVSS 9.8
- CVE-2024-38813: VMware vCenter Server Privilege Escalation Vulnerabilitycriticalexploited in the wildCVSS 9.8
- CVE-2023-34048: VMware vCenter Server Out-of-Bounds Write Vulnerabilitycriticalexploited in the wildCVSS 9.8
- CVE-2026-22719: Broadcom VMware Aria Operations command injection during migrationcriticalexploited in the wildCVSS 8.1EPSS 2.1%
- CVE-2025-41244: Broadcom VMware Aria Operations and VMware Tools privilege escalationcriticalexploited in the wildCVSS 7.8EPSS 0.6%
- CVE-2025-1976: Broadcom Brocade Fabric OS Code Injection Vulnerabilitycriticalexploited in the wildCVSS 6.7
- CVE-2022-22948: VMware vCenter Server Incorrect Default File Permissions Vulnerabilitycriticalexploited in the wildCVSS 6.5
- CVE-2021-21973: VMware vCenter Server and Cloud Foundation Server Side Request Forgery (SSRF) Vulnerabilitycriticalexploited in the wildCVSS 5.3
Vulnerabilities per week
2 vulnerabilities in the last four weeks, down 71% on the four before (7). The last 13 weeks, by the week each vulnerability was published.
| Week of | Bar | Vulns | Critical |
|---|---|---|---|
| 17 Aug 2026 | 1 | 0 | |
| 24 Aug 2026 | 0 | 0 | |
| 31 Aug 2026 | 0 | 0 | |
| 7 Sep 2026 | 0 | 0 | |
| 14 Sep 2026 | 0 | 0 | |
| 21 Sep 2026 | 6 | 0 | |
| 28 Sep 2026 | 0 | 0 | |
| 5 Oct 2026 | 1 | 0 | |
| 12 Oct 2026 | 0 | 0 | |
| 19 Oct 2026 | 1 | 0 | |
| 26 Oct 2026 | 1 | 0 | |
| 2 Nov 2026 | 0 | 0 | |
| 9 Nov 2026 | 0 | 0 |
Embed a badge
A live badge for a README, a status page or an internal wiki: how many Broadcom vulnerabilities were published in the last 7 days and how many of them are critical, refreshed hourly.
[](https://junglewise.ai/threats/vendors/broadcom)<a href="https://junglewise.ai/threats/vendors/broadcom"><img src="https://junglewise.ai/threats/vendors/broadcom/badge.svg" alt="Broadcom vulnerabilities" /></a>How this is built
Junglewise Threat Intelligence collects vulnerabilities from NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories, and matches each one to the technologies and vendors it affects. Dates are the date a vulnerability was published, in UTC.
The pages are rebuilt from the database every hour. Frozen weekly and monthly reports never change once published, so they can be cited.
Use this data
The same data is at https://junglewise.ai/threats/vendors/broadcom.json, and this page as text at https://junglewise.ai/threats/vendors/broadcom.md, for scripts and language models. It is free to reuse under CC BY 4.0 with a link back to this page.
Cite as: Junglewise Threat Intelligence, "Broadcom vulnerabilities", https://junglewise.ai/threats/vendors/broadcom, 10 November 2026.