Back to Database
Status published
High
CVE-2025-69269
Spectrum command injection in NCM service
Vulnerability Description
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Broadcom DX NetOps Spectrum on Windows, Linux allows OS Command Injection.This issue affects DX NetOps Spectrum: 23.3.6 and earlier.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-69269
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- Jean-Michel Huguet and Jorge Escabias from NATO Cyber Security Centre
More from Broadcom
View All →CVE-2025-9059
Elevation of Privileges Vulnerability in IT Management Suite
High
8.8
CVE-2025-8661
Stored Cross-Site Scripting in Symantec PGP Encryption 11.0.1
Medium
4.6
CVE-2025-8660
Privilege Escalation in Symantec PGP Encryption 11.0.1
Medium
5.6
CVE-2025-7398
Medium Strength Cipher Suites detected on port on ports 9000 and 8036
High
8.6
CVE-2025-7397
CLI history displays inline passwords
Medium
6.8
Affected Vendor
Broadcom
View all reports →Affected Software
DX NetOps Spectrum
Vulnerable Versions:
23.3.6 and earlier, 23.3.7 and later
Timeline
Official Publish:
January 12th, 2026
Last Modified:
January 12th, 2026
Added to House:
July 22nd, 2026