B
Vendor security profile7 actively exploited CVEs
broadcom
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs91
Critical9
CISA KEV7
Public exploit32
Patch rate%51
Avg. CVSS6.8
12-month vulnerability rate
0
0
1
0
1
0
0
19
26
12
7
0
CVE KEV
CVE severity distribution
91toplam CVE
Critical9 (10%)
High31 (34%)
Medium44 (48%)
Low3 (3%)
Uncertain4 (4%)
Patch and exploitation view
%51
Verified patch
%8
CISA KEV
%35
Public exploit
46Patch available
0Partial
5Workaround
0Vendor: no patch
40Unknown
Latest vulnerabilities
4.5
CVE-2026-67421
RabbitMQ: Stored HTML Injection in RabbitMQ Management OAuth Error Handling
R
Patch verifiedEPSS %0
7.1
CVE-2026-67408
RabbitMQ: Stream Management Super-Stream Binding Keys Allocation Allows Low-Privilege Node Denial of Service
R
Patch verifiedEPSS %0
8.2
CVE-2026-67410
RabbitMQ: OAuth2 Client Secret Exposed via Unauthenticated JavaScript Endpoint
R
Patch verifiedEPSS %0
6.0
CVE-2026-67411
RabbitMQ: Web MQTT with PROXY Protocol enabled: a loopback-only user permission bypass
R
Patch verifiedEPSS %0
6.0
CVE-2026-67412
RabbitMQ: Federation upstream skips vhost authorization allowing cross-vhost message access
R
Patch status unknownEPSS %0
8.2
CVE-2026-67409
RabbitMQ: JWKS Fetch Ignores HTTP Response Status Code - Signing Key Destruction Causes Authentication DoS
R
Patch status unknownEPSS %0
6.0
CVE-2026-66073
RabbitMQ: Atom table exhaustion via management API node field
R
Patch verifiedEPSS %0
8.2
CVE-2026-59316
Spring Authorization Server Default Consent Page is vulnerable to Cross-Site Scripting (XSS)
S
Patch status unknownEPSS %0
6.6
CVE-2026-59284
Spring Cloud Commons no allow list for writable env actuator endpoint
S
Patch status unknownEPSS %0
6.1
CVE-2026-59355
Spring Authorization Server: Open Redirect via request_uri parameter
V
Patch status unknownEPSS %0