Skip to content
Broadcom Fixes 89 New Vulnerabilities in TrueSource Spring Enterprise

Broadcom Fixes 89 New Vulnerabilities in TrueSource Spring Enterprise

First seen 27 Oct 2026, 16:49 UTC • •

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •October 27, 2026 at 18:17 UTC
  • •Broadcom fixed 89 new vulnerabilities in TrueSource Spring Enterprise.
  • •Total vulnerabilities fixed in 2026 now stands at 408.
  • •Key vulnerabilities include CVE-2026-41855 and CVE-2026-47691.

On October 27, 2026, Broadcom announced the release of patches for 89 new vulnerabilities in TrueSource Spring Enterprise, increasing the total fixed vulnerabilities to 408 for the year. The vulnerabilities affect critical infrastructure customers and others with early access. The patches include enhancements such as TrueSource Hub for assessing application exposure and build plugins for Application Advisor to automate patching. Notable vulnerabilities fixed earlier this year include CVE-2026-41855, a high-severity remote code execution flaw, and CVE-2026-47691, a critical DNS redirection vulnerability. Detailed vulnerability information will be disclosed once fixes are available to the community. Broadcom's commitment to open source security includes using AI scanning to identify vulnerabilities quickly.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-06-09
CVE-2026-41855 published
A high-severity remote code execution vulnerability was disclosed affecting multiple Spring versions.
Finance.Yahoo
2026-06-12
CVE-2026-47691 published
A critical DNS redirection vulnerability was disclosed, impacting all supported Spring versions.
Finance.Yahoo
2026-09-23
CVE-2026-67404 published
A critical credential forgery vulnerability was disclosed, affecting multiple supported lines.
Finance.Yahoo
2026-10-27
Broadcom releases patches
Broadcom shipped patches for 89 new vulnerabilities, enhancing security for TrueSource Spring Enterprise.
Finance.Yahoo

More articles in this cluster (6)

Following this threat?

Track JFrog and CVE-2026-41855 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Common questions

Which vulnerabilities were fixed?
Broadcom fixed 89 new vulnerabilities, including CVE-2026-41855 and CVE-2026-47691.
What is the impact of these vulnerabilities?
The vulnerabilities could potentially allow remote code execution and credential forgery, affecting critical infrastructure.
How can I apply the patches?
Patches can be deployed through TrueSource Hub and Application Advisor to automate the patching process.