<?xml version="1.0" encoding="UTF-8"?>

<!-- AUTOGENERATED FILE. DO NOT EDIT. -->

<feed xmlns="http://www.w3.org/2005/Atom">
  <id>tag:google.com,2016:vmware-solution-on-google-cloud-security-bulletins</id>
  <title>VMware solution on Google Cloud - Security Bulletins</title>
  <link rel="self" href="https://docs.cloud.google.com/feeds/vmware-solution-on-google-cloud-security-bulletins.xml"/>
  <author>
    <name>Google Cloud Documentation</name>
  </author>
  <updated>2026-11-05T16:25:00.000000+00:00</updated>


  <entry>
    <title>GCP-2026-079</title>
    <id>tag:google.com,2016:vmware-solution-on-google-cloud-security-bulletins#gcp-2026-079</id>
    <updated>2026-11-05T16:25:00.000000+00:00</updated>
    <link rel="alternate" href="https://docs.cloud.google.com/vmware-engine/docs/vmware-solution/security-bulletins#gcp-2026-079"/>
    <content type="html"><![CDATA[<p><strong>Published:</strong> 2026-11-05</p><h3 class="hide-from-toc" data-text="Description" id="description" tabindex="-1">Description</h3><table>
<thead>
<tr>
<th width="70%">Description</th>
<th>Severity</th>
<th>Notes</th>
</tr>
</thead>
<tbody>
<tr>
<td>
<p>Per advisory <a href="https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/39445">VMSA-2026-0008</a>, Broadcom has identified an out-of-bounds write remote code execution vulnerability in the SDDC Manager Node.js Brotli decoder. This impacts only <a href="https://docs.cloud.google.com/vmware-engine/docs/vmware-solution/overview">VMware solution on Google Cloud</a> running VMware Cloud Foundation 9.1.x and does not impact Google Cloud VMware Engine.</p>
<h4 data-text="What should I do?" id="what-should-i-do" tabindex="-1">What should I do?</h4>
<p>To remediate, apply the Broadcom-recommended workarounds outlined in the <a href="https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/39445">VMSA-2026-0008</a> advisory.</p>
</td>
<td>Critical</td>
<td>
<ul>
<li><a href="https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/39445">VMSA-2026-0008</a></li>
<li>CVE-2026-111497</li>
</ul>
</td>
</tr>
</tbody>
</table>]]>
    </content>
  </entry>


</feed>
