Broadcom Automic Automation vulnerabilities

2 CVEs affecting Broadcom Automic Automation, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-8370, published 2026-05-19.

More from Broadcom.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2025-4971, published 2025-05-20. High severity, CVSS 8.5. EPSS: 0.6% chance of exploitation in the next 30 days. Broadcom Automic Automation Agent Unix versions < 24.3.0 HF4 and < 21.0.13 HF1 allow low privileged users who have execution rights on the agent executable to escalate their privileges.
• CVE-2026-8370, published 2026-05-19. High severity, CVSS 8.5. EPSS: 0.2% chance of exploitation in the next 30 days. Execution with unnecessary privileges vulnerability in Broadcom Automic Automation Agent Unix on Linux x64, Linux Power 64 BE, Linux Power 64 LE, zLinux (zSeries), AIX, Solaris x64, Solaris Sparc 64…