Impact of CVE-2026-9256 on VMware Cloud Director (VCD)

Products

• VMware Cloud Director

Issue/Introduction

• Vulnerability scanners report VMware Cloud Director nginx package versions as potentially vulnerable to CVE-2026-9256.
• Security assessments identify nginx versions within upstream affected ranges.

Environment

VMware Cloud Director 10.6

Resolution

Broadcom is aware of CVE-2026-9256

Please refer to the release notes for existing and forthcoming product releases for any updates in relation to these CVE. Should you require further information please contact Broadcom Support.

Subscribe to receive an email when the article is updated.