OpenSSH vulnerabilities flagged (CVE-2026-35386, CVE-2026-35385, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414)

Products

• VMware vCenter Server
• VMware SDDC Manager / VCF Installer

Issue/Introduction

Security scans are flagging OpenSSH vulnerabilities, specifically CVE-2026-35386, CVE-2026-35385, CVE-2026-35387, CVE-2026-35388, and CVE-2026-35414.

Environment

• VMware vSphere 8.0.3
• SDDC Manager 5.2.2

Cause

Vulnerability scanners have identified potential OpenSSH CVEs within the environment.

Resolution

VMware By Broadcom is aware of CVE-2026-35386, CVE-2026-35385, CVE-2026-35387, CVE-2026-35388, and CVE-2026-35414. 

Refer to the release notes for existing and forthcoming product releases for any updates in relation to these CVEs. 

Should you require further information, contact Broadcom Support.