ChangeIntelIT change radar
Public mode

No tenant, Graph, or device access. Every item links to its source. What this means

Some sources or documents need attention: 252/253 feeds/APIs · 416/443 docs · checked 21:22 UTC Customize Public modeDiscuss ChangeIntel on Discord

Broadcom VMware vCenter Server Out-of-bounds Write Vulnerability

CISA lists this Broadcom VMware vCenter Server vulnerability as known exploited. The vendor's advisory has the fixed versions.

CISA catalog record

Broadcom VMware vCenter Server contains an out-of-bounds write vulnerability in the implementation of the DCERPC protocol. This could allow a malicious actor with network access to vCenter Server to send specially crafted network packets, potentially leading to remote code execution.

Product
VMware vCenter Server
Added to KEV
23 Jan 2026
Federal remediation due
13 Feb 2026
Known ransomware use
Not reported
ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources read 12 Oct 21:22 UTC · 252 of 253 readable · 252 fully read · documentation 416/443 current