Exploited vulnerabilities
Broadcom
6 Broadcom vulnerabilities in the CISA KEV catalogue: those for which the US cybersecurity agency has evidence of exploitation in real attacks.
In the catalogue6
Last 12 months4
In ransomware campaigns1
Last addition28 October 2026
The vulnerabilities6
- 28 October 2026CVE-2026-41709VMware ESXBroadcom VMWare ESX Insufficient Logging Vulnerability
- 18 August 2026CVE-2026-59310VMware vCenterBroadcom VMware vCenter Path Traversal VulnerabilityRansomware
- 3 March 2026CVE-2026-22719VMware Aria OperationsBroadcom VMware Aria Operations Command Injection Vulnerability
- 23 January 2026CVE-2024-37079VMware vCenter ServerBroadcom VMware vCenter Server Out-of-bounds Write Vulnerability
- 30 October 2025CVE-2025-41244VMware Aria Operations and VMware ToolsBroadcom VMware Aria Operations and VMware Tools Privilege Defined with Unsafe Actions Vulnerability
- 28 April 2025CVE-2025-1976Brocade Fabric OSBroadcom Brocade Fabric OS Code Injection Vulnerability
Data: CISA Known Exploited Vulnerabilities (KEV) catalogue, last addition on 4 November 2026.
The catalogue lists only vulnerabilities with evidence of exploitation, not all of the vendor's vulnerabilities.
Alerts only on the products you use
With My Defence you receive alerts and briefings only on the products you use, Broadcom included.