CVE-2025-69270

Critical · 9.8

CVSS

9.8

EPSS

0.3%

Published

Jan 12, 2026

CISA due date

—

The record

Information Exposure Through Query Strings in GET Request vulnerability in Broadcom DX NetOps Spectrum on Windows, Linux allows Session Hijacking.This issue affects DX NetOps Spectrum: 24.3.8 and earlier.

Affected packages

Ecosystem	Package	Introduced	Fixed