CVE-2026-101034

Vendor

VMware (Broadcom)

Product

Symantec Ghost Solution Suite

CVSS v4.0

6.8 AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:P/AU:Y/R:U/V:D/RE:H/U:Amber

Weakness

CWE-522

Exposure class

Endpoint security

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 16
   CVE NVD 5d ago

   An attacker who obtained the hardcoded key could decrypt domain/service account passwords, task run-as credentials, and sysprep passwords stored in…

   An attacker who obtained the hardcoded key could decrypt domain/service account passwords, task run-as credentials, and sysprep passwords stored in or transmitted by GSS Deployment Server installation.

   CVSS 6.8 CVE-2026-101034 VMware (Broadcom)