PT-2026-48382 · Broadcom · Layer 7 Api Gateway

Published 2026-06-10 · Updated 2026-06-10 · CVE-2026-11815

NVD

CVSS v4.0

5.3

Medium

Base vector

AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:H/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

An attacker who intercepts and tampers with traffic between the client application and the API Gateway server could potentially deserialize arbitrary objects. This vulnerability could lead to broken security expectations or remote code execution.

Fix

Deserialization of Untrusted Data

Weakness Enumeration

CWE-502

Related Identifiers

CVE-2026-11815

Affected Products

Layer 7 Api Gateway

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2026-11815 · Security Note
• https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/37631 · Vendor Advisory