CVE-2025-69270: Spectrum session token in URL
Published Jan 12, 2026
·Updated
Information Exposure Through Query Strings in GET Request vulnerability in Broadcom DX NetOps Spectrum on Windows, Linux allows Session Hijacking.This issue affects DX NetOps Spectrum: 24.3.8 and earlier.
Affected Software
4 affected components
Broadcom DX NetOps Spectrum<24.3.8
All of the following
Broadcom DX NetOps Spectrum<24.3.9
Any of the following
Linux Linux kernel
Microsoft Windows
Event History
Jan 12, 2026
CVE Published
via MITRE·04:20 AM
Data Sourced
via MITRE·04:20 AM
DescriptionWeakness
Data Sourced
via NVD·05:16 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-69270?
The severity of CVE-2025-69270 is critical, as it allows session hijacking through information exposure.
2
How do I fix CVE-2025-69270?
To fix CVE-2025-69270, upgrade to DX NetOps Spectrum version 24.3.9 or later.
3
What systems are affected by CVE-2025-69270?
CVE-2025-69270 affects Broadcom DX NetOps Spectrum versions 24.3.8 and earlier on Windows and Linux systems.
4
What type of vulnerability is CVE-2025-69270?
CVE-2025-69270 is an information exposure vulnerability that occurs through query strings in GET requests.
5
Can CVE-2025-69270 allow unauthorized access?
Yes, CVE-2025-69270 can potentially allow unauthorized access through session hijacking.