VMware

Reports on Broadcom's vSphere Express cite up to 128 cores and a $9,600 figure that none of the cited reports attributes to Broadcom; analysts split on the EEA vSphere 8 terms.

Cloud architect Andrija Panić published OpenVDDK, an Apache-2.0 library he calls a drop-in for VMware's VDDK; its README says the repository is read-only and pull requests are not accepted yet.

Broadcom has contributed Velero, the Kubernetes-native backup and disaster recovery tool with 9,900 GitHub stars, to the CNCF Sandbox after the Technical Oversight Committee approved the proposal filed in February 2026.

A command injection vulnerability in Broadcom's VMware Aria Operations is under active exploitation, prompting CISA to set a March 24 federal remediation deadline.

A hardcoded-credential flaw in Dell RecoverPoint rated CVSS 10.0 let Chinese spies deploy three malware families and hide inside VMware infrastructure since mid-2024.