Deserialization Vulnerability in Broadcom DX NetOps Spectrum on Windows and Linux
CVE-2025-69276

2.3LOW

Key Information:

Vendor

Broadcom
Status
Dx Netops Spectrum
Vendor
CVE Published:
12 January 2026

What is CVE-2025-69276?

A deserialization vulnerability has been identified in Broadcom DX NetOps Spectrum affecting both Windows and Linux environments. This issue arises from the improper handling of untrusted data, which can potentially allow attackers to perform object injection. Users are advised to review their systems and update to the latest version to mitigate associated risks and protect sensitive data from unauthorized access.

Affected Version(s)

DX NetOps Spectrum Windows 24.3.13 and earlier

DX NetOps Spectrum Windows 25.4.1 and later

References

https://support.broadcom.com/web/ecx/support-content-noti...
vendor-advisory

CVSS V4

Score:
2.3
Severity:
LOW
Confidentiality:
Low
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
High
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Jean-Michel Huguet and Jorge Escabias from NATO Cyber Security Centre
JSON
.