What’s Vulnerable › Vulnerabilities
CVE-2026-11815: Insecure Deserialization via MITM in Layer 7 Policy Manager
- Severity: medium (CVSS 5.3 v4.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.3% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2026-06-10 · updated 2026-07-23
- Weakness: CWE-502
Description
An attacker who intercepts and tampers with traffic between the client application and the API Gateway server could potentially deserialize arbitrary objects. This vulnerability could lead to broken security expectations or remote code execution.
Affected products
- Broadcom Layer 7 API Gateway: 11.2.1
References
Get alerted when CVE-2026-11815 or the next vulnerability affects your stack