{
  "site": "https://pwn.watch",
  "generatedAt": "2026-10-22T17:40:31.642Z",
  "tag": {
    "id": "broadcom",
    "label": "Broadcom",
    "isStack": false,
    "url": "https://pwn.watch/t/broadcom",
    "feed": "https://pwn.watch/t/broadcom/feed.xml"
  },
  "counts": {
    "incidents": 4,
    "live": 0,
    "notFullyPatched": 0,
    "patched": 4
  },
  "incidents": [
    {
      "slug": "broadcom-vmware-vcenter-cve-2026-59310",
      "title": "Broadcom VMware vCenter: Broadcom VMware vCenter Path Traversal Vulnerability",
      "url": "https://pwn.watch/i/broadcom-vmware-vcenter-cve-2026-59310",
      "json": "https://pwn.watch/i/broadcom-vmware-vcenter-cve-2026-59310.json",
      "status": "closed",
      "severity": "high",
      "patchStatus": "patched",
      "product": "Broadcom VMware vCenter",
      "tags": [
        "vmware",
        "vcenter",
        "broadcom",
        "ransomware",
        "cisa-kev"
      ],
      "cveIds": [
        "CVE-2026-59310"
      ],
      "affectedVersions": [
        "See vendor advisory / CISA notes (versions not always listed in KEV feed)"
      ],
      "fixedVersions": [
        "See vendor advisory linked in sources"
      ],
      "startedAt": "2026-08-18",
      "closedAt": "2026-08-18",
      "updatedAt": "2026-08-18",
      "summary": "Broadcom VMware vCenter contains a path traversal vulnerability which could allow a threat actor with network access to vCenter to execute arbitrary code. Added to CISA KEV on 2026-08-18.",
      "xPost": null
    },
    {
      "slug": "broadcom-vmware-aria-operations-cve-2026-22719",
      "title": "Broadcom VMware Aria Operations: Broadcom VMware Aria Operations Command Injection Vulnerability",
      "url": "https://pwn.watch/i/broadcom-vmware-aria-operations-cve-2026-22719",
      "json": "https://pwn.watch/i/broadcom-vmware-aria-operations-cve-2026-22719.json",
      "status": "closed",
      "severity": "high",
      "patchStatus": "patched",
      "product": "Broadcom VMware Aria Operations",
      "tags": [
        "vmware",
        "broadcom",
        "cisa-kev",
        "rce"
      ],
      "cveIds": [
        "CVE-2026-22719"
      ],
      "affectedVersions": [
        "See vendor advisory / CISA notes (versions not always listed in KEV feed)"
      ],
      "fixedVersions": [
        "See vendor advisory linked in sources"
      ],
      "startedAt": "2026-03-03",
      "closedAt": "2026-03-03",
      "updatedAt": "2026-03-03",
      "summary": "Broadcom VMware Aria Operations formerly known as vRealize Operations (vROps) contains a command injection vulnerability that allows an unauthenticated attacker to execute arbitrary commands, potentially leading to remote code execution during support‑assisted product migration. Added to CISA KEV on 2026-03-03.",
      "xPost": null
    },
    {
      "slug": "broadcom-vmware-aria-operations-and-vmware-tools-cve-2025-41244",
      "title": "Broadcom VMware Aria Operations and VMware Tools: VMware Aria Operations and VMware Tools Privilege Defined with Unsafe Actions Vulnerability",
      "url": "https://pwn.watch/i/broadcom-vmware-aria-operations-and-vmware-tools-cve-2025-41244",
      "json": "https://pwn.watch/i/broadcom-vmware-aria-operations-and-vmware-tools-cve-2025-41244.json",
      "status": "closed",
      "severity": "high",
      "patchStatus": "patched",
      "product": "Broadcom VMware Aria Operations and VMware Tools",
      "tags": [
        "vmware",
        "broadcom",
        "cisa-kev"
      ],
      "cveIds": [
        "CVE-2025-41244"
      ],
      "affectedVersions": [
        "See vendor advisory / CISA notes (versions not always listed in KEV feed)"
      ],
      "fixedVersions": [
        "See vendor advisory linked in sources"
      ],
      "startedAt": "2025-10-30",
      "closedAt": "2025-10-30",
      "updatedAt": "2025-10-30",
      "summary": "Broadcom VMware Aria Operations and VMware Tools contain a privilege defined with unsafe actions vulnerability. A malicious local actor with non-administrative privileges having access to a VM with VMware Tools installed and managed by Aria Operations with SDMP enabled may exploit this vulnerability to escalate privileges to root on the same VM. Added to CISA KEV on 2025-10-30.",
      "xPost": null
    },
    {
      "slug": "broadcom-brocade-fabric-os-cve-2025-1976",
      "title": "Broadcom Brocade Fabric OS: Brocade Fabric OS Code Injection Vulnerability",
      "url": "https://pwn.watch/i/broadcom-brocade-fabric-os-cve-2025-1976",
      "json": "https://pwn.watch/i/broadcom-brocade-fabric-os-cve-2025-1976.json",
      "status": "closed",
      "severity": "high",
      "patchStatus": "patched",
      "product": "Broadcom Brocade Fabric OS",
      "tags": [
        "broadcom",
        "cisa-kev",
        "rce"
      ],
      "cveIds": [
        "CVE-2025-1976"
      ],
      "affectedVersions": [
        "See vendor advisory / CISA notes (versions not always listed in KEV feed)"
      ],
      "fixedVersions": [
        "See vendor advisory linked in sources"
      ],
      "startedAt": "2025-04-28",
      "closedAt": "2025-04-28",
      "updatedAt": "2025-04-28",
      "summary": "Broadcom Brocade Fabric OS contains a code injection vulnerability that allows a local user with administrative privileges to execute arbitrary code with full root privileges. Added to CISA KEV on 2025-04-28.",
      "xPost": null
    }
  ],
  "posts": [],
  "changes": [
    {
      "incident": "broadcom-vmware-vcenter-cve-2026-59310",
      "incidentTitle": "Broadcom VMware vCenter: Broadcom VMware vCenter Path Traversal Vulnerability",
      "severity": "high",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2026-08-18",
      "title": "CISA added CVE-2026-59310 to the KEV catalog (due 2026-08-21).",
      "body": null,
      "sourceUrl": null,
      "url": "https://pwn.watch/i/broadcom-vmware-vcenter-cve-2026-59310"
    },
    {
      "incident": "broadcom-vmware-aria-operations-cve-2026-22719",
      "incidentTitle": "Broadcom VMware Aria Operations: Broadcom VMware Aria Operations Command Injection Vulnerability",
      "severity": "high",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2026-03-03",
      "title": "CISA added CVE-2026-22719 to the KEV catalog (due 2026-03-24).",
      "body": null,
      "sourceUrl": null,
      "url": "https://pwn.watch/i/broadcom-vmware-aria-operations-cve-2026-22719"
    },
    {
      "incident": "broadcom-vmware-aria-operations-and-vmware-tools-cve-2025-41244",
      "incidentTitle": "Broadcom VMware Aria Operations and VMware Tools: VMware Aria Operations and VMware Tools Privilege Defined with Unsafe Actions Vulnerability",
      "severity": "high",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2025-10-30",
      "title": "CISA added CVE-2025-41244 to the KEV catalog (due 2025-11-20).",
      "body": null,
      "sourceUrl": null,
      "url": "https://pwn.watch/i/broadcom-vmware-aria-operations-and-vmware-tools-cve-2025-41244"
    },
    {
      "incident": "broadcom-brocade-fabric-os-cve-2025-1976",
      "incidentTitle": "Broadcom Brocade Fabric OS: Brocade Fabric OS Code Injection Vulnerability",
      "severity": "high",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2025-04-28",
      "title": "CISA added CVE-2025-1976 to the KEV catalog (due 2025-05-19).",
      "body": null,
      "sourceUrl": null,
      "url": "https://pwn.watch/i/broadcom-brocade-fabric-os-cve-2025-1976"
    }
  ]
}