broadcom Layer 7 API Gateway vulnerabilities

Latest broadcom Layer 7 API Gateway CVEs

Newest publication first

1. CVE-2026-11815 Insecure Deserialization via MITM in Layer 7 Policy Manager

   Published 2026-06-10

   Medium·CVSS 5.3 EPSS 0.34%

   An attacker who intercepts and tampers with traffic between the client application and the API Gateway server could potentially deserialize arbitrary objects. This vulnerability could lead to broken security expectations or remote code execution.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.