Skip to contentBroadcom vulnerabilities
Products
Show 75 moreShow less
Newest
- broadcom rabbitmq server, rabbitmq rabbitmq-server +1 moreRabbitMQ: Super-stream HTTP creation skips configure-permission checkCVE-2026-67218Fix available2.1 Low
- broadcom rabbitmq server, rabbitmq rabbitmq-server +1 moreRabbitMQ: Super-stream partitions unbounded allocationCVE-2026-66080Fix available5.9 Medium
- broadcom rabbitmq server, rabbitmq rabbitmq-server +1 moreRabbitMQ: Pre-auth AMQP 1.0 array32 zero-width element DoSCVE-2026-66079Fix available8.2 High
- broadcom rabbitmq server, rabbitmq rabbitmq-server +1 moreRabbitMQ: protected tag bypass via bulk-deleteCVE-2026-66078Fix available2.1 Low
- broadcom rabbitmq server, rabbitmq rabbitmq-server +1 moreRabbitMQ: Stored XSS via TLS peer-certificate DN in management UICVE-2026-66077Fix available7.3 High
- broadcom rabbitmq server, rabbitmq rabbitmq-server +1 moreRabbitMQ: Cross-vhost quorum-queue status and stream tracking disclosureCVE-2026-66076Fix available2.3 Low
- broadcom rabbitmq server, rabbitmq rabbitmq-server +1 moreRabbitMQ: Monitoring-tag user can restart federation linksCVE-2026-66075Fix available2.3 Low
- broadcom rabbitmq server, rabbitmq rabbitmq-server +1 moreRabbitMQ: ReDoS via management API ?name= filterCVE-2026-66074Fix available6.0 Medium
- broadcom rabbitmq server, rabbitmq rabbitmq-server +1 moreRabbitMQ: Atom table exhaustion via management API node fieldCVE-2026-66073Fix available6.0 Medium
- broadcom rabbitmq server, rabbitmq rabbitmq-server +1 moreRabbitMQ: Atom table exhaustion via stream `chunk_selector`CVE-2026-66072Fix available6.0 Medium
- broadcom rabbitmq server, rabbitmq rabbitmq-server +1 moreRabbitMQ: Atom exhaustion: OAuth2 JWT tag: scope valuesCVE-2026-66071Fix available6.0 Medium
- broadcom rabbitmq server, rabbitmq rabbitmq-server +1 moreRabbitMQ: CORS * reflects Origin with Allow-CredentialsCVE-2026-66070Fix available7.6 High
- broadcom rabbitmq server, rabbitmq rabbitmq-server +1 moreRabbitMQ: Monitoring-tag DELETE of auth-attempt metricsCVE-2026-66069Fix available2.3 Low
- broadcom rabbitmq server, rabbitmq rabbitmq-server +1 moreRabbitMQ: Shovel DEBUG log of full state exposes decrypted URIsCVE-2026-66068Fix available5.6 Medium
- broadcom rabbitmq server, rabbitmq rabbitmq-server +1 moreRabbitMQ: Stream protocol skips per vhost per user connection limitsCVE-2026-66067Fix available6.0 Medium
- broadcom rabbitmq server, rabbitmq rabbitmq-server +1 moreRabbitMQ: AMQP 1.0 management `GET /bindings` exposes full binding topology to any authenticated AMQP user without resource/management permission checksCVE-2026-61837Fix available6.3 Medium
- broadcom rabbitmq server, rabbitmq rabbitmq-server +1 moreRabbitMQ: Authenticated RabbitMQ JMS Topic Selector Users Can Consume Broker CPU with an Unbounded LIKE Regular ExpressionCVE-2026-67413Fix available6.0 Medium
- broadcom spring authorization server, spring authorization server +1 moreSpring Authorization Server Default Consent Page is vulnerable to Cross-Site Scripting (XSS)CVE-2026-593168.2 High
- broadcom spring cloud commons, spring cloud commons +1 moreSpring Cloud Commons no allow list for writable env actuator endpointCVE-2026-59284Fix available6.6 Medium
- broadcom spring authorization server, spring authorization server +1 moreSpring Authorization Server: Open Redirect via request_uri parameterCVE-2026-593556.1 Medium
- broadcom spring batch, spring batch +1 moreDenial of Service in Spring Batch FlatFileItemReader via Malformed Input FileCVE-2026-47881Fix available5.9 Medium
- broadcom spring batch, spring batch +1 moreUnsafe Java deserialization in DefaultExecutionContextSerializer without class allowlistCVE-2026-47878Fix available5.6 Medium
- broadcom spring batch, spring batch +1 moreJobParameterDeserializer bypasses the trusted-type allowlistCVE-2026-478755.6 Medium
- broadcom reactor coreReactor Core bufferTimeout fair-backpressure pipeline permanently hangs when upstream delivers items during an active flushCVE-2026-47863Fix available5.9 Medium
- broadcom reactor coreReactor Core windowTimeout fair-backpressure stream hang due to 20-bit index wrap-aroundCVE-2026-47857Fix available5.9 Medium
- broadcom reactor nettyReactor Netty HTTP Server may incorrectly evaluate proxy addressesCVE-2026-478455.3 Medium
- broadcom reactor nettyReactor Netty WebSocket Client Leaks Credentials On RedirectCVE-2026-478486.1 Medium
- broadcom reactor nettyReactor Netty HTTP Server Leaks Exception DetailsCVE-2026-478445.3 Medium
- broadcom reactor nettyReactor Netty may incorrectly route traffic due to DNS resolver reuseCVE-2026-478433.7 Low
- broadcom vmware esx, vmware esx, cloud foundation +3 more +5 moreESX insufficient logging vulnerabilityCVE-2026-41709In KEV2.7 Low
- broadcom vmware vcenter, vmware vcenter, cloud foundation +4 more +6 morevCenter directory-traversal vulnerabilityCVE-2026-59310In KEVPublic exploitEPSS 61.7%9.8 Critical
- broadcom spring tools, spring tools for eclipse, tools for vscode / cursor / theia +2 moreHTTP Proxy Credentials Logged in Plaintext by the Spring Boot Language ServerCVE-2026-593263.3 Low
- broadcom spring tools, spring tools for eclipse +1 moreCross-Site Scripting in Eclipse Spring Boot Starter Wizard Dependency TooltipsCVE-2026-593284.2 Medium
- broadcom spring tools, spring tools for eclipse +1 moreCleartext Storage of Spring Boot DevTools Remote Secret in Eclipse Launch ConfigurationsCVE-2026-593274.4 Medium
- broadcom spring tools, spring tools for eclipse +1 moreSpring Boot DevTools remote secret generated with a non-cryptographic PRNGCVE-2026-478828.3 High
- broadcom spring tools, spring tools for eclipse +1 moreSpring Tools Docker integration publishes unauthenticated debug (JDWP) and JMX ports on all network interfacesCVE-2026-478738.0 High
- broadcom spring tools, spring tools for eclipse, tools for vscode / cursor / theia +2 morelive information startup mode is vulnerable for remote code executionCVE-2026-47858Public exploit8.0 High
- broadcom vmware avi load balancer, vmware avi load balancer +1 moreVMware Avi Load Balancer Directory Traversal VulnerabilityCVE-2026-478718.8 High
- broadcom vmware avi load balancer, vmware avi load balancer +1 moreVMware Avi Load Balancer Privilege Escalation VulnerabilityCVE-2026-478707.1 High
- broadcom vmware avi load balancer, vmware avi load balancer +1 moreVMware Avi Load Balancer Remote Code Execution VulnerabilityCVE-2026-478698.7 High
- broadcom vmware avi load balancer, vmware avi load balancer +1 moreVMware Avi Load Balancer Local Privilege Escalation VulnerabilityCVE-2026-478687.8 High
- broadcom vmware avi load balancer, vmware avi load balancer +1 moreVMware Avi Load Balancer Remote Code Execution VulnerabilityCVE-2026-478678.7 High
- broadcom vmware avi load balancer, vmware avi load balancer +1 moreVMware Avi Load Balancer Authorization Bypass VulnerabilityCVE-2026-478668.3 High
- broadcom vmware avi load balancer, vmware avi load balancer +1 moreVMware Avi Load Balancer Authentication Bypass VulnerabilityCVE-2026-478659.8 Critical
- broadcom symantec management suiteLocal privilege escalation in Symantec ITMSCVE-2026-153805.1 Medium
- broadcom symantec it management suiteArbitrary File Read as SYSTEM in Symantec ITMSCVE-2026-153795.1 Medium
- broadcom spring authorization server, spring authorization server +1 moreSpring Security Authorization Server Dynamic Client Registration endpoints perform insufficient validation of client metadataCVE-2026-22752Fix available9.6 Critical
- broadcom rabbitmq server, rabbitmq rabbitmq-server +1 moreRabbitMQ: Topic authorization can lead to cross-tenant routing-key bypassCVE-2026-57217Fix available7.0 High
- broadcom rabbitmq server, rabbitmq rabbitmq-server +1 moreRabbitMQ: Passive queue/exchange declaration bypasses authorization checks, leaking queue metadata to unprivileged usersCVE-2026-57221Fix available5.3 Medium
- broadcom rabbitmq server, rabbitmq rabbitmq-server +1 moreRabbitMQ: Direct-reply-to binding persistence can lead to unauthorized reply-channel injection and persistent phantomCVE-2026-57215Fix available7.0 High
- Show moreLoading…