Multiple vulnerabilities reported for HCX 4.11.5

Products

• VMware HCX

Issue/Introduction

You observe that security scanners (such as Tenable, Nessus, or Qualys) report the following vulnerabilities for the HCX 4.11.5 appliance:

• CVE-2025-61984
• CVE-2026-35385
• CVE-2026-35386
• CVE-2026-35387
• CVE-2026-35388
• CVE-2026-35414

These vulnerabilities are primarily related to OpenSSH versions used within the underlying Photon OS.

Environment

VMware HCX 4.11.5 or earlier

Resolution

VMware By Broadcom is aware of the above mentioned CVE's.

Refer to the release notes for existing and forthcoming product releases for any updates in relation to this CVE.

Should you require further information contact Broadcom Support.