Broadcom
CVEs currently on EVULNABLE's Priority Feed for Broadcom, and this vendor's own CISA KEV history.
CISA KEV additions over time
Weekly additions to the KEV catalog, last 26 weeks. Ransomware-linked additions are the base of each bar. Ransomware-linked as currently marked by CISA; recent weeks can rise as CISA updates entries.
20 Apr – 12 Oct; busiest week: 1 added.
- Not ransomware-linked
- Ransomware-linked
- This week (so far)
| Week of | Added to KEV | Ransomware-linked |
|---|---|---|
| 2026-04-20 | 0 | 0 |
| 2026-04-27 | 0 | 0 |
| 2026-05-04 | 0 | 0 |
| 2026-05-11 | 0 | 0 |
| 2026-05-18 | 0 | 0 |
| 2026-05-25 | 0 | 0 |
| 2026-06-01 | 0 | 0 |
| 2026-06-08 | 0 | 0 |
| 2026-06-15 | 0 | 0 |
| 2026-06-22 | 0 | 0 |
| 2026-06-29 | 0 | 0 |
| 2026-07-06 | 0 | 0 |
| 2026-07-13 | 0 | 0 |
| 2026-07-20 | 0 | 0 |
| 2026-07-27 | 0 | 0 |
| 2026-08-03 | 0 | 0 |
| 2026-08-10 | 0 | 0 |
| 2026-08-17 | 1 | 1 |
| 2026-08-24 | 0 | 0 |
| 2026-08-31 | 0 | 0 |
| 2026-09-07 | 0 | 0 |
| 2026-09-14 | 0 | 0 |
| 2026-09-21 | 0 | 0 |
| 2026-09-28 | 0 | 0 |
| 2026-10-05 | 0 | 0 |
| 2026-10-12 (so far) | 0 | 0 |
In EVULNABLE's ranked feed
Showing all 5 Broadcom CVEs in EVULNABLE's ranked feed.
#1 85 Immediate CVE-2026-59310 ExigentCISA federal deadline · Overdue by 57 daysRansomwareCISA KEV Broadcom — Broadcom VMware vCenter Path Traversal Vulnerability KEV + ransomware, EPSS 2.6%, added to KEV within the last 90 days
EVRS 85/100 · EVRS priority: Immediate · Exigent, a flag within Immediate. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and associated with known ransomware campaigns.
#2 75 Urgent CVE-2024-37079 CISA federal deadline · Overdue by 8 monthsCISA KEV Broadcom — Broadcom VMware vCenter Server Out-of-bounds Write Vulnerability KEV, EPSS 22.4%
EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.224.
#3 75 Urgent CVE-2026-22719 CISA federal deadline · Overdue by 7 monthsCISA KEV Broadcom — Broadcom VMware Aria Operations Command Injection Vulnerability KEV, EPSS 18.1%
EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.181.
#4 75 Urgent CVE-2025-41244 CISA federal deadline · Overdue by 11 monthsCISA KEV Broadcom — Broadcom VMware Aria Operations and VMware Tools Privilege Defined with Unsafe Actions Vulnerability KEV, EPSS 8.4%
EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.084.
#5 75 Urgent CVE-2025-1976 KEV since 2025 · listed over a yearCISA KEV Broadcom — Broadcom Brocade Fabric OS Code Injection Vulnerability KEV, EPSS 0.7%
EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.007.