CVE-2022-23992: Broadcom Xcom Data Transport

Critical severity, CVSS 9.8. EPSS: 2.4% chance of exploitation in the next 30 days.

XCOM Data Transport for Windows, Linux, and UNIX 11.6 releases contain a vulnerability due to insufficient input validation that could potentially allow remote attackers to execute arbitrary commands with elevated privileges.

Affected products

• Broadcom Xcom Data Transport: version 11.6 only

Published 2022-02-14. Last modified 2026-06-17.