BROADCOM FIXES HIGH-SEVERITY VMWARE NSX BUGS REPORTED BY NSA

Summary from the TLDR InfoSec newsletter

Broadcom has patched two high-severity VMware NSX vulnerabilities (CVE-2025-41251 and CVE-2025-41252) reported by the NSA, both involving username enumeration flaws in password recovery mechanisms that allow unauthenticated attackers to identify valid usernames for potential brute-force attacks. These vulnerabilities affect VMware NSX, a critical networking virtualization solution widely used in enterprise private and hybrid cloud environments, making them attractive targets for state-sponsored hackers and ransomware groups that frequently exploit VMware products. Security professionals should immediately apply the available patches and review their VMware infrastructure for other recent vulnerabilities, as this follows a pattern of actively exploited VMware zero-days throughout 2025, including those used by Chinese state actors and disclosed at security conferences.