PatchTheCEVbroadcom vulnerabilities
Recent CVEs affecting broadcom products. 6 tracked.
broadcom has 6 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 6. Most recent: 2026-07-30. Highest priority: CVE-2023-27534 (score 57/100).
- CVE-2023-27534 HIGH 8.8 UPGRADE MITIGATE A path traversal vulnerability exists in curl <8.0.0 SFTP implementation causes the tilde (~) character to be
- CVE-2023-27537 MEDIUM 5.9 DOWNGRADE MITIGATE A double free vulnerability exists in libcurl <8.0.0 when sharing HSTS data between separate "handles"
- CVE-2026-47873 HIGH 8.0 UPGRADE The Boot Dashboard Docker integration in Spring Tools publishes container control ports on all of the host's n
- CVE-2026-47882 HIGH 8.3 UPGRADE When enabling Spring Boot DevTools support for a remote application target (for example a Docker container or
- CVE-2026-59327 MEDIUM 4.4 UPGRADE Spring Tools for Eclipse stores the Spring Boot DevTools remote secret (spring.devtools.remote.secret) as a pl
- CVE-2026-59328 MEDIUM 4.2 UPGRADE Spring Tools for Eclipse renders Spring Boot starter wizard dependency tooltips in a native embedded browser (
FAQ
How do I fix broadcom vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is broadcom being exploited right now?
None of the tracked broadcom CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which broadcom CVE should I patch first?
CVE-2023-27534 currently ranks highest (57/100): A path traversal vulnerability exists in curl <8.0.0 SFTP implementation causes the tilde (~) character to be .