Broadcom Dx Netops Spectrum vulnerabilities

10 CVEs affecting Broadcom Dx Netops Spectrum, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-69276, published 2026-01-12.

More from Broadcom.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2025-69269, published 2026-01-12. Critical severity, CVSS 9.8. EPSS: 0.9% chance of exploitation in the next 30 days. Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Broadcom DX NetOps Spectrum on Windows, Linux allows OS Command Injection.This issue…
• CVE-2025-69273, published 2026-01-12. High severity, CVSS 7.5. EPSS: 0.3% chance of exploitation in the next 30 days. Improper Authentication vulnerability in Broadcom DX NetOps Spectrum on Windows, Linux allows Authentication Bypass.This issue affects DX NetOps Spectrum: 24.3.10 and earlier.
• CVE-2025-69267, published 2026-01-12. Medium severity, CVSS 6.5. EPSS: 0.3% chance of exploitation in the next 30 days. Improper Limitation of a Pathname to a Restricted Directory (Path Traversal) vulnerability in Broadcom DX NetOps Spectrum on Windows, Linux allows Path Traversal.This issue affects DX NetOps…
• CVE-2025-69270, published 2026-01-12. Critical severity, CVSS 9.8. EPSS: 0.3% chance of exploitation in the next 30 days. Information Exposure Through Query Strings in GET Request vulnerability in Broadcom DX NetOps Spectrum on Windows, Linux allows Session Hijacking.This issue affects DX NetOps Spectrum: 24.3.8 and…
• CVE-2025-69276, published 2026-01-12. High severity, CVSS 8.8. EPSS: 0.3% chance of exploitation in the next 30 days. Deserialization of Untrusted Data vulnerability in Broadcom DX NetOps Spectrum on Windows, Linux allows Object Injection.This issue affects DX NetOps Spectrum: 24.3.13 and earlier.
• CVE-2025-69274, published 2026-01-12. High severity, CVSS 8.8. EPSS: 0.3% chance of exploitation in the next 30 days. Authorization Bypass Through User-Controlled Key vulnerability in Broadcom DX NetOps Spectrum on Windows, Linux allows Privilege Escalation.This issue affects DX NetOps Spectrum: 24.3.10 and earlier.
• CVE-2025-69271, published 2026-01-12. High severity, CVSS 7.5. EPSS: 0.2% chance of exploitation in the next 30 days. Insufficiently Protected Credentials vulnerability in Broadcom DX NetOps Spectrum on Windows, Linux allows Sniffing Attacks.This issue affects DX NetOps Spectrum: 24.3.13 and earlier.
• CVE-2025-69272, published 2026-01-12. High severity, CVSS 7.5. EPSS: 0.2% chance of exploitation in the next 30 days. Cleartext Transmission of Sensitive Information vulnerability in Broadcom DX NetOps Spectrum on Windows, Linux allows Sniffing Attacks.This issue affects DX NetOps Spectrum: 21.2.1 and earlier.
• CVE-2025-69268, published 2026-01-12. Medium severity, CVSS 6.1. EPSS: 0.2% chance of exploitation in the next 30 days. Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Broadcom DX NetOps Spectrum on Windows, Linux allows Reflected XSS.This issue affects DX…
• CVE-2025-69275, published 2026-01-12. Medium severity, CVSS 6.1. EPSS: 0.1% chance of exploitation in the next 30 days. Dependency on Vulnerable Third-Party Component vulnerability in Broadcom DX NetOps Spectrum on Windows, Linux allows DOM-Based XSS.This issue affects DX NetOps Spectrum: 24.3.9 and earlier.