Broadcom known exploited vulnerabilities
CISA's Known Exploited Vulnerabilities catalog lists 5 Broadcom vulnerabilities: 4 added in the last 365 days, 2 rated critical (CVSS 9 or higher), and 1 with known ransomware use. The most recent was added Aug 18, 2026.
RSS feed for Broadcom exploited vulnerabilities · Search them on KEVWire · Ask your AI assistant
| Added to KEV | CVE | Vulnerability | CVSS | EPSS | Federal due date | Ransomware use |
|---|---|---|---|---|---|---|
| 2026-08-18 | CVE-2026-59310 | Broadcom VMware vCenter Path Traversal Vulnerability | 9.8 (v3.1) | 2.6% | 2026-08-21 | Known |
| 2026-03-03 | CVE-2026-22719 | Broadcom VMware Aria Operations Command Injection Vulnerability | 8.1 (v3.1) | 18.3% | 2026-03-24 | Unknown |
| 2026-01-23 | CVE-2024-37079 | Broadcom VMware vCenter Server Out-of-bounds Write Vulnerability | 9.8 (v3.1) | 22.4% | 2026-02-13 | Unknown |
| 2025-10-30 | CVE-2025-41244 | Broadcom VMware Aria Operations and VMware Tools Privilege Defined with Unsafe Actions Vulnerability | 7.8 (v3.1) | 8.6% | 2025-11-20 | Unknown |
| 2025-04-28 | CVE-2025-1976 | Broadcom Brocade Fabric OS Code Injection Vulnerability | 8.6 (v4.0) | 0.7% | 2025-05-19 | Unknown |