CVE-2026-11815: Broadcom Layer 7 API Gateway

Medium severity, CVSS 5.3. EPSS: 0.3% chance of exploitation in the next 30 days.

An attacker who intercepts and tampers with traffic between the client application and the API Gateway server could potentially deserialize arbitrary objects. This vulnerability could lead to broken security expectations or remote code execution.

Affected products

• Broadcom Layer 7 API Gateway: version 11.2.1 only

Published 2026-06-10. Last modified 2026-07-23.