Error: Qualys scanner flags CVE-2026-27651 - VCF Operations for Networks

Products

• VCF Operations for Networks

Issue/Introduction

• Broadcom is aware of CVE-2026-27651 in relation to VCF Operations for Networks (formerly Aria Operations for Networks).
  
  
• This article provides the official guidance regarding these vulnerabilities.
  
  
• Security scanners report CVE-2026-27651 on the appliance.
  
  
• The vulnerability is associated with the NGINX mail authentication module.
  
  
• NOTE:  VCF Operations for Networks was formerly named Aria Operations for Networks (AON), and prior to that was named vRealize Network Insight (vRNI).

Environment

• VCF Operations for Networks 6.14.0

Resolution

• Broadcom is aware of CVE-2026-27651 
  
  
• Refer to the release notes for existing and forthcoming product releases for any updates in relation to this/these CVE/CVEs.
  
  
• To speak with a customer representative or a Support Engineer see Contact Support
  .
• Scroll to the bottom of the page and click on the respective region for the phone number or refer to Contact Broadcom Support.