Broadcom fixes high-severity VMware NSX bugs reported by NSA

Broadcom published security advisories and patches for multiple high-severity VMware vulnerabilities — including two NSX username-enumeration flaws (CVE-2025-41251, CVE-2025-41252), a vCenter SMTP header injection (CVE-2025-41250), and Aria/Tools issues that can enable privilege escalation and credential theft — noting contributions from the NSA and contextualizing the risk with past zero-days and active exploitation of VMware products by state and criminal actors.