GCP-2026-079 — Published: 2026-11-05Description Description Severity Notes Per advisory VMSA-2026-0008, Broadcom has identified an out-of-bounds write…

Published: 2026-11-05Description Description Severity Notes Per advisory VMSA-2026-0008, Broadcom has identified an out-of-bounds write remote code execution vulnerability in the SDDC Manager Node.js Brotli decoder. This impacts only VMware solution on Google Cloud running VMware Cloud Foundation 9.1.x and does not impact Google Cloud VMware Engine. What should I do? To remediate, apply the Broadcom-recommended workarounds outlined in the VMSA-2026-0008 advisory. For more information, see the VMware solution on Google Cloud security bulletin. Critical VMSA-2026-0008 CVE-2026-111497