CVE-2025-69269

Critical · 9.8

CVSS

9.8

EPSS

0.9%

Published

Jan 12, 2026

CISA due date

—

The record

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Broadcom DX NetOps Spectrum on Windows, Linux allows OS Command Injection.This issue affects DX NetOps Spectrum: 23.3.6 and earlier.

Affected packages

Ecosystem	Package	Introduced	Fixed