Broadcom

Latest news

1. 23 Oct
   Arista patches actively exploited VeloCloud Orchestrator SQL injection zero-day

   Arista released security updates to fix a critical SQL injection zero-day (CVE-2026-114625) in VeloCloud Orchestrator (VCO) that allows authenticated low‑privilege users to escalate to operator/superuser. Hosted and dedicated orchestrators have been patched and fixes for on‑prem deployments are available in specific VCO releases.

   Security · 2 sources

   

2. 19 Oct
   Critical remote code flaws found in SiteGuard WAF and Broadcom Wi‑Fi software

   Security researchers and vendors report two distinct, actively exploitable vulnerabilities: an OS command‑injection in SiteGuard Server Edition (CVE‑2026‑106931) that can run commands as root or SYSTEM, and a Broadcom Wi‑Fi setup flaw that lets an attacker in radio range run code as root on affected routers. Both issues are being demonstrated or observed in the wild and affect widely deployed products and devices.

   Security · 2 sources

   

Articles

No articles about Broadcom yet.