Impact of CVE-2026-27739 and CVE-2026-27446 on VMware NSX

Products

• VMware NSX

Issue/Introduction

This KB relates to the vulnerabilities CVE-2026-27739 and CVE-2026-27446 and the product VMware NSX. 

• CVE-2026-27739 
  This vulnerability is related to Server-Side Request Forgery (SSRF) within the Angular Server-Side Rendering (SSR) package.
• CVE-2026-27446
  This vulnerability affects the Apache Artemis (ActiveMQ) messaging component.

Environment

VMware NSX 

Resolution

VMware By Broadcom is aware of CVE-2026-27739 and CVE-2026-27446. 
Please refer to the release notes for existing and forthcoming product releases for any updates in relation to this CVE.
Should you require further information please contact Broadcom Support

 

Additional Information

https://nvd.nist.gov/vuln/detail/CVE-2026-27739
https://nvd.nist.gov/vuln/detail/CVE-2026-27446