Skip to content
OpenAdvisories
High · 7.1 CVE-2025-69269 EUVD-2026-1955GHSA-7v62-cqvq-27h8

Spectrum command injection in NCM service

Published Jan 12, 2026 · Updated Jan 12, 2026 · Assigned by ca

Description

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Broadcom DX NetOps Spectrum on Windows, Linux allows OS Command Injection.This issue affects DX NetOps Spectrum: 23.3.6 and earlier.

Affected products

VendorProductAffectedFixed
Broadcom DX NetOps Spectrum 23.3.6 and earlier 23.3.7 and later

References