VMSA-2026-0008: Critical SDDC Manager RCE (CVE-2026-111497) — Workarounds Available, Patches Pending
Broadcom’s October 28 VMSA-2026-0008.1 revises CVE-2026-111497 affected-product scope to VCF-only SDDC Manager 9.x and 5.2.x, superseding the original VVF 9.x listing. CVSS 9.8/7.5, patches pending, workarounds available in KB 460732 and 460734.