Vendor
VMware / Broadcom
Every ZeroDayFeed story on VMware / Broadcom — across breaches, zero-days, ransomware, patches, policy, and industry, newest first.
3articles
2026-10-23latest coverage
Zero-Days & Exploitsmost-covered category
-
Zero-Days & Exploits
Arista Patches Third Exploited VeloCloud Orchestrator Zero-Day in Four Months (CVE-2026-114625)
Arista's CVE-2026-114625, a CVSS 9.9 SQL injection, lets even a read-only VeloCloud Orchestrator user become superuser. It is already being exploited, it is the third exploited VCO zero-day since July, and no configuration blocks it. On-prem admins have to upgrade.
-
Zero-Days & Exploits
Ransomware Crews Have Used Palo Alto's GlobalProtect Login Bypass Since June, Unit 42 Says
A GlobalProtect authentication bypass Palo Alto patched in May, CVE-2026-0257, has been giving Qilin, Inc and other ransomware crews VPN access past MFA since June, and some intrusions went on to vCenter, ESXi and offline theft of domain credentials.
