CVE-2025-69269: Spectrum command injection in NCM service
Published Jan 12, 2026
·Updated
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Broadcom DX NetOps Spectrum on Windows, Linux allows OS Command Injection.This issue affects DX NetOps Spectrum: 23.3.6 and earlier.
Affected Software
4 affected components
Broadcom DX NetOps Spectrum<=23.3.6
All of the following
Broadcom DX NetOps Spectrum<23.3.7
Any of the following
Linux Linux kernel
Microsoft Windows
Event History
Jan 12, 2026
CVE Published
via MITRE·04:10 AM
Data Sourced
via MITRE·04:10 AM
DescriptionWeakness
Data Sourced
via NVD·05:16 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-69269?
CVE-2025-69269 has a high severity rating due to its potential for OS command injection.
2
How do I fix CVE-2025-69269?
To fix CVE-2025-69269, upgrade to Broadcom DX NetOps Spectrum version 23.3.7 or later.
3
What causes CVE-2025-69269?
CVE-2025-69269 is caused by improper neutralization of special elements used in OS commands.
4
What software is affected by CVE-2025-69269?
CVE-2025-69269 affects Broadcom DX NetOps Spectrum versions 23.3.6 and earlier.
5
Can CVE-2025-69269 lead to serious security issues?
Yes, CVE-2025-69269 can lead to unauthorized command execution and potential system compromise.