VCF Operations for Networks Security Scanner Flag for CVE-2026-42945 in NGINX

Products

• VCF Operations for Networks

Issue/Introduction

• Security scanners flag VCF Operations for Networks nodes as vulnerable to CVE-2026-42945 (NGINX ngx_http_rewrite_module Security Vulnerability).
  
  
• Administrative users request validation of active exposure.
  
  
• NOTE:  VCF Operations for Networks was formerly named Aria Operations for Networks (AON), and prior to that was named vRealize Network Insight (vRNI).

Environment

VCF Operations for Networks

Resolution

• Broadcom is aware of CVE-2026-42945
  
  
• Refer to the release notes for existing and forthcoming product releases for any updates in relation to this/these CVE/CVEs.
  
  
• Should you require further information please contact Broadcom Support using the process at KB 142884 - Creating and managing Broadcom cases