Impact of CVE-2026-42945 on VMware Cloud Director (VCD)

Products

• VMware Cloud Director

Issue/Introduction

• Vulnerability scanners report VMware Cloud Director nginx package versions as potentially vulnerable to CVE-2026-42945.
• Security assessments identify nginx versions within upstream affected ranges

Environment

VMware Cloud Director 10.6

Resolution

Broadcom is aware of CVE-2026-42945

Please refer to the release notes for existing and forthcoming product releases for any updates in relation to these CVE. Should you require further information please contact Broadcom Support.

Subscribe to receive an email when the article is updated.