Error: CVE-2026-42945 NGINX vulnerability flag - VCF Operations for Networks

Products

• VCF Operations for Networks

Issue/Introduction

• Security scanners flag VCF Operations for Networks nodes as vulnerable to CVE-2026-42945 (NGINX ngx_http_rewrite_module Security Vulnerability).
  
  
• Administrative users request validation of active exposure.
  
  
• NOTE:  VCF Operations for Networks was formerly named Aria Operations for Networks (AON), and prior to that was named vRealize Network Insight (vRNI).

Environment

VCF Operations for Networks 6.14.0

Resolution

• Broadcom is aware of CVE-2026-42945
  
  
• Refer to the release notes for existing and forthcoming product releases for any updates in relation to this/these CVE/CVEs.
  
  
• Should you require further information see KB 206567 - Contact Broadcom Support.