Impact assessment of CVE-2026-41940 on VCF Operations for Networks

Products

• VCF Operations for Networks

Issue/Introduction

Vulnerability scanners or security audits may flag CVE-2026-41940 as a potential risk due to generic version matching or shared software component libraries.

NOTE:  VCF Operations for Networks was formerly named Aria Operations for Networks (AON), and prior to that was named vRealize Network Insight (vRNI).

 

Environment

VCF Operations for Networks

Resolution

• Broadcom is aware of CVE-2026-41940
  
  
• Refer to the release notes for existing and forthcoming product releases for any updates in relation to this/these CVE/CVEs.
  
  
• Should you require further information please contact Broadcom Support using the process at Creating and managing Broadcom cases