{"version":"https://jsonfeed.org/version/1.1","title":"Patchfirst: Broadcom vulnerabilities","home_page_url":"https://patchfirst.co/vendor/broadcom/","feed_url":"https://patchfirst.co/feed/vendor/broadcom.json","description":"New and newly exploited Broadcom CVEs, with CISA KEV, EPSS and ATT&CK context. Newest 50 by publication or KEV listing.","language":"en-GB","items":[{"id":"CVE-2026-41709#kev","url":"https://patchfirst.co/cve/CVE-2026-41709/","title":"[KEV] CVE-2026-41709: Broadcom VMWare ESX Insufficient Logging Vulnerability","content_text":"Broadcom · VMware ESX. In CISA KEV since 2026-10-28. ENISA EUVD lists it as exploited. EPSS 0.7% (higher than 52.7% of CVEs). CVSS 2.7 LOW. ATT&CK: T1078 Valid Accounts. Priority 59.8 of 100.","summary":"Broadcom VMWare ESX Insufficient Logging Vulnerability","date_published":"2026-10-28T00:00:00.000Z","date_modified":"2026-10-29T17:29:11.000Z","tags":["kev","T1078"],"_patchfirst":{"reason":"kev","priority":59.8,"kev":{"dateAdded":"2026-10-28","ransomware":false},"epss":{"score":0.00689,"percentile":0.52718},"cvss":{"score":2.7,"severity":"LOW","version":"3.1"},"vendor":"Broadcom","product":"VMware ESX","techniqueIds":["T1078"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2026-59310#kev","url":"https://patchfirst.co/cve/CVE-2026-59310/","title":"[KEV] CVE-2026-59310: Broadcom VMware vCenter Path Traversal Vulnerability","content_text":"Broadcom · VMware vCenter. In CISA KEV since 2026-08-18, known ransomware use. ENISA EUVD lists it as exploited. EPSS 2.6% (higher than 85.1% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 86.9 of 100.","summary":"Broadcom VMware vCenter Path Traversal Vulnerability","date_published":"2026-08-18T00:00:00.000Z","date_modified":"2026-08-19T04:17:24.000Z","tags":["kev","ransomware","public-exploit","T1190","T1059"],"_patchfirst":{"reason":"kev","priority":86.9,"kev":{"dateAdded":"2026-08-18","ransomware":true},"epss":{"score":0.02565,"percentile":0.85103},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Broadcom","product":"VMware vCenter","techniqueIds":["T1190","T1059"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2026-22719#kev","url":"https://patchfirst.co/cve/CVE-2026-22719/","title":"[KEV] CVE-2026-22719: Broadcom VMware Aria Operations Command Injection Vulnerability","content_text":"Broadcom · VMware Aria Operations. In CISA KEV since 2026-03-03. ENISA EUVD lists it as exploited. EPSS 18.3% (higher than 97.2% of CVEs). CVSS 8.1 HIGH. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 68.1 of 100.","summary":"Broadcom VMware Aria Operations Command Injection Vulnerability","date_published":"2026-03-03T00:00:00.000Z","date_modified":"2026-06-17T10:20:17.000Z","tags":["kev","T1190","T1059"],"_patchfirst":{"reason":"kev","priority":68.1,"kev":{"dateAdded":"2026-03-03","ransomware":false},"epss":{"score":0.18321,"percentile":0.9722},"cvss":{"score":8.1,"severity":"HIGH","version":"3.1"},"vendor":"Broadcom","product":"VMware Aria Operations","techniqueIds":["T1190","T1059"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2024-37079#kev","url":"https://patchfirst.co/cve/CVE-2024-37079/","title":"[KEV] CVE-2024-37079: Broadcom VMware vCenter Server Out-of-bounds Write Vulnerability","content_text":"Broadcom · VMware vCenter Server. In CISA KEV since 2026-01-23. ENISA EUVD lists it as exploited. EPSS 22.4% (higher than 97.7% of CVEs). CVSS 9.8 CRITICAL. ATT&CK: T1210 Exploitation of Remote Services; T1059 Command and Scripting Interpreter. Priority 69.4 of 100.","summary":"Broadcom VMware vCenter Server Out-of-bounds Write Vulnerability","date_published":"2026-01-23T00:00:00.000Z","date_modified":"2026-06-17T07:37:43.000Z","tags":["kev","T1210","T1059"],"_patchfirst":{"reason":"kev","priority":69.4,"kev":{"dateAdded":"2026-01-23","ransomware":false},"epss":{"score":0.22377,"percentile":0.97689},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Broadcom","product":"VMware vCenter Server","techniqueIds":["T1210","T1059"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2025-41244#kev","url":"https://patchfirst.co/cve/CVE-2025-41244/","title":"[KEV] CVE-2025-41244: Broadcom VMware Aria Operations and VMware Tools Privilege Defined with Unsafe Actions Vulnerability","content_text":"Broadcom · VMware Aria Operations and VMware Tools. In CISA KEV since 2025-10-30. ENISA EUVD lists it as exploited. EPSS 8.6% (higher than 95.1% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. ATT&CK: T1068 Exploitation for Privilege Escalation; T1548 Abuse Elevation Control Mechanism. Priority 67.5 of 100.","summary":"Broadcom VMware Aria Operations and VMware Tools Privilege Defined with Unsafe Actions Vulnerability","date_published":"2025-10-30T00:00:00.000Z","date_modified":"2026-10-18T21:10:00.000Z","tags":["kev","public-exploit","T1068","T1548"],"_patchfirst":{"reason":"kev","priority":67.5,"kev":{"dateAdded":"2025-10-30","ransomware":false},"epss":{"score":0.08629,"percentile":0.95094},"cvss":{"score":7.8,"severity":"HIGH","version":"3.1"},"vendor":"Broadcom","product":"VMware Aria Operations and VMware Tools","techniqueIds":["T1068","T1548"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2025-1976#kev","url":"https://patchfirst.co/cve/CVE-2025-1976/","title":"[KEV] CVE-2025-1976: Broadcom Brocade Fabric OS Code Injection Vulnerability","content_text":"Broadcom · Brocade Fabric OS. In CISA KEV since 2025-04-28. ENISA EUVD lists it as exploited. EPSS 0.7% (higher than 52.8% of CVEs). CVSS 6.7 MEDIUM. ATT&CK: T1068 Exploitation for Privilege Escalation; T1059 Command and Scripting Interpreter. Priority 53.2 of 100.","summary":"Broadcom Brocade Fabric OS Code Injection Vulnerability","date_published":"2025-04-28T00:00:00.000Z","date_modified":"2026-06-17T08:40:28.000Z","tags":["kev","T1068","T1059"],"_patchfirst":{"reason":"kev","priority":53.2,"kev":{"dateAdded":"2025-04-28","ransomware":false},"epss":{"score":0.0069,"percentile":0.52779},"cvss":{"score":6.7,"severity":"MEDIUM","version":"3.1"},"vendor":"Broadcom","product":"Brocade Fabric OS","techniqueIds":["T1068","T1059"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}}]}