OS Command Injection in Broadcom DX NetOps Spectrum 23.3.6 (and earlier)
CVE-2025-69269 Published on January 12, 2026
Spectrum command injection in NCM service
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Broadcom DX NetOps Spectrum on Windows, Linux allows OS Command Injection.This issue affects DX NetOps Spectrum: 23.3.6 and earlier.
Weakness Type
What is a Shell injection Vulnerability?
The software constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.
CVE-2025-69269 has been classified to as a Shell injection vulnerability or weakness.
Products Associated with CVE-2025-69269
Want to know whenever a new CVE is published for Broadcom Dx Netops Spectrum? stack.watch will email you.
Affected Versions
Broadcom DX NetOps Spectrum:- Version 23.3.6 and earlier is affected.
- Version 23.3.7 and later is unaffected.
Exploit Probability
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.