Vendor

Broadcom

6 of 6 Broadcom CVEs in Patchfirst (100%) are in of vulnerabilities exploited in the wild, 1 of them used by ransomware.

CVEs: 6
In CISA KEV: 6100%
Known ransomware use: 1
Median days to KEV: 25; from publication
Latest KEV listing: 28 Oct 2026

Watch Broadcom Subscribe (RSS) JSON Feed All feeds

Products

In KEVOther CVEs

ProductKEVCVEs
Brocade Fabric OS In KEV: 1 CVEs: 1
VMware Aria Operations In KEV: 1 CVEs: 1
VMware Aria Operations and VMware Tools In KEV: 1 CVEs: 1
VMware ESX In KEV: 1 CVEs: 1
VMware vCenter In KEV: 1 CVEs: 1
VMware vCenter Server In KEV: 1 CVEs: 1

Top ATT&CK techniques

What attackers do with Broadcom CVEs

TechniqueCVEs
T1059Command and Scripting Interpreter CVEs: 4
T1190Exploit Public-Facing Application CVEs: 2
T1068Exploitation for Privilege Escalation CVEs: 2
T1210Exploitation of Remote Services CVEs: 1
T1548Abuse Elevation Control Mechanism CVEs: 1

Open in ATT&CK Navigator

A layer for MITRE’s ATT&CK Navigator: techniques scored by the highest Patchfirst priority among their CVEs, neutral to red, with the CVE ids in each comment. “Open in Navigator” loads https://patchfirst.co/navigator/vendor/broadcom.json. Or download it and in Navigator choose Open Existing Layer → Upload from local.

Counts are Broadcom CVEs linked to the technique. Each link’s provenance is on the CVE page.

Broadcom CVEs

6 CVEs, by priority

CVE-2026-59310Broadcom VMware vCenter Path Traversal Vulnerability
Broadcom · VMware vCenterKEVRansomwarePublic exploitCritical · 9.8T1190Exploit Public-Facing Application T1059Command and Scripting Interpreter
2.6%Top 15%
86.9priority
CVE-2024-37079Broadcom VMware vCenter Server Out-of-bounds Write Vulnerability
Broadcom · VMware vCenter ServerKEVCritical · 9.8T1059Command and Scripting Interpreter T1210Exploitation of Remote Services
22.4%Top 2.3%
69.4priority
CVE-2026-22719Broadcom VMware Aria Operations Command Injection Vulnerability
Broadcom · VMware Aria OperationsKEVHigh · 8.1T1190Exploit Public-Facing Application T1059Command and Scripting Interpreter
18.3%Top 2.8%
68.1priority
CVE-2025-41244Broadcom VMware Aria Operations and VMware Tools Privilege Defined with Unsafe Actions Vulnerability
Broadcom · VMware Aria Operations and VMware ToolsKEVPublic exploitHigh · 7.8T1068Exploitation for Privilege Escalation T1548Abuse Elevation Control Mechanism
8.6%Top 4.9%
67.5priority
CVE-2026-41709Broadcom VMWare ESX Insufficient Logging Vulnerability
Broadcom · VMware ESXKEVLow · 2.7T1078Valid Accounts
0.7%Top 47%
59.8priority
CVE-2025-1976Broadcom Brocade Fabric OS Code Injection Vulnerability
Broadcom · Brocade Fabric OSKEVMedium · 6.7T1059Command and Scripting Interpreter T1068Exploitation for Privilege Escalation
0.7%Top 47%
53.2priority