https://patchfirst.co/vendor/broadcom/New and newly exploited Broadcom CVEs, with CISA KEV, EPSS and ATT&CK context. Newest 50 by publication or KEV listing.en-gb360Sat, 31 Oct 2026 13:00:36 GMThttps://patchfirst.co/cve/CVE-2026-41709/CVE-2026-41709#kevWed, 28 Oct 2026 00:00:00 GMTBroadcom · VMware ESX. In CISA KEV since 2026-10-28. ENISA EUVD lists it as exploited. EPSS 0.7% (higher than 52.7% of CVEs). CVSS 2.7 LOW. ATT&CK: T1078 Valid Accounts. Priority 59.8 of 100.kevT1078https://patchfirst.co/cve/CVE-2026-59310/CVE-2026-59310#kevTue, 18 Aug 2026 00:00:00 GMTBroadcom · VMware vCenter. In CISA KEV since 2026-08-18, known ransomware use. ENISA EUVD lists it as exploited. EPSS 2.6% (higher than 85.1% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 86.9 of 100.kevransomwarepublic-exploitT1190T1059https://patchfirst.co/cve/CVE-2026-22719/CVE-2026-22719#kevTue, 03 Mar 2026 00:00:00 GMTBroadcom · VMware Aria Operations. In CISA KEV since 2026-03-03. ENISA EUVD lists it as exploited. EPSS 18.3% (higher than 97.2% of CVEs). CVSS 8.1 HIGH. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 68.1 of 100.kevT1190T1059https://patchfirst.co/cve/CVE-2024-37079/CVE-2024-37079#kevFri, 23 Jan 2026 00:00:00 GMTBroadcom · VMware vCenter Server. In CISA KEV since 2026-01-23. ENISA EUVD lists it as exploited. EPSS 22.4% (higher than 97.7% of CVEs). CVSS 9.8 CRITICAL. ATT&CK: T1210 Exploitation of Remote Services; T1059 Command and Scripting Interpreter. Priority 69.4 of 100.kevT1210T1059https://patchfirst.co/cve/CVE-2025-41244/CVE-2025-41244#kevThu, 30 Oct 2025 00:00:00 GMTBroadcom · VMware Aria Operations and VMware Tools. In CISA KEV since 2025-10-30. ENISA EUVD lists it as exploited. EPSS 8.6% (higher than 95.1% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. ATT&CK: T1068 Exploitation for Privilege Escalation; T1548 Abuse Elevation Control Mechanism. Priority 67.5 of 100.kevpublic-exploitT1068T1548https://patchfirst.co/cve/CVE-2025-1976/CVE-2025-1976#kevMon, 28 Apr 2025 00:00:00 GMTBroadcom · Brocade Fabric OS. In CISA KEV since 2025-04-28. ENISA EUVD lists it as exploited. EPSS 0.7% (higher than 52.8% of CVEs). CVSS 6.7 MEDIUM. ATT&CK: T1068 Exploitation for Privilege Escalation; T1059 Command and Scripting Interpreter. Priority 53.2 of 100.kevT1068T1059