DX NetOps Spectrum vulnerabilities

7 known vulnerabilities in DX NetOps Spectrum from Broadcom. 7 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  DX NetOps Spectrum: Deserialization of Untrusted Data

  CVE-2025-69276Jan 12, 2026Broadcom

  Deserialization of Untrusted Data vulnerability in Broadcom DX NetOps Spectrum on Windows, Linux allows Object Injection.This issue affects DX NetOps Spectrum: 24.3.13 and earlier.

• 8.8 High severity

  DX NetOps Spectrum: Authorization Bypass Through User-Controlled Key

  CVE-2025-69274Jan 12, 2026Broadcom

  Authorization Bypass Through User-Controlled Key vulnerability in Broadcom DX NetOps Spectrum on Windows, Linux allows Privilege Escalation.This issue affects DX NetOps Spectrum: 24.3.10 and earlier.

• 7.5 High severity

  DX NetOps Spectrum: Improper Authentication

  CVE-2025-69273Jan 12, 2026Broadcom

  Improper Authentication vulnerability in Broadcom DX NetOps Spectrum on Windows, Linux allows Authentication Bypass.This issue affects DX NetOps Spectrum: 24.3.10 and earlier.

• 7.5 High severity

  DX NetOps Spectrum: Cleartext Transmission of Sensitive Information

  CVE-2025-69272Jan 12, 2026Broadcom

  Cleartext Transmission of Sensitive Information vulnerability in Broadcom DX NetOps Spectrum on Windows, Linux allows Sniffing Attacks.This issue affects DX NetOps Spectrum: 21.2.1 and earlier.

• 7.5 High severity

  DX NetOps Spectrum: Insufficiently Protected Credentials

  CVE-2025-69271Jan 12, 2026Broadcom

  Insufficiently Protected Credentials vulnerability in Broadcom DX NetOps Spectrum on Windows, Linux allows Sniffing Attacks.This issue affects DX NetOps Spectrum: 24.3.13 and earlier.

• 9.8 Critical severity

  DX NetOps Spectrum: Use of HTTP Request With Sensitive Query String

  CVE-2025-69270Jan 12, 2026Broadcom

  Information Exposure Through Query Strings in GET Request vulnerability in Broadcom DX NetOps Spectrum on Windows, Linux allows Session Hijacking.This issue affects DX NetOps Spectrum: 24.3.8 and earlier.

• 9.8 Critical severity

  DX NetOps Spectrum: Improper Neutralization of Special Elements used in an OS Command

  CVE-2025-69269Jan 12, 2026Broadcom

  Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Broadcom DX NetOps Spectrum on Windows, Linux allows OS Command Injection.This issue affects DX NetOps Spectrum: 23.3.6 and earlier.