Broadcom Issues Critical Patches for VMware Tanzu Greenplum and RabbitMQ Products

Broadcom released security advisories between July 8 and 10, 2026, addressing vulnerabilities in multiple VMware Tanzu Greenplum and RabbitMQ products, including some rated as critical.

This article was drafted with AI assistance from multiple sources and was reviewed and approved by a human editor before publication.

Broadcom has published a series of security advisories between July 8 and 10, 2026, to address vulnerabilities in several VMware Tanzu products. The advisories, collectively identified under serial number AV26-681, cover multiple versions of open-source RabbitMQ and VMware Tanzu Greenplum components.

Among the affected products are VMware Tanzu Greenplum Command Center, Data Copy Utility (versions prior to 2.9.5), on Kubernetes (versions prior to 1.1.2), MCP Server (versions prior to 1.0.2), Streaming Server, and Text (versions prior to 4.0.2). Additionally, multiple versions of VMware Tanzu RabbitMQ, VMware Tanzu RabbitMQ on Kubernetes, and VMware Tanzu RabbitMQ on Tanzu Platform are impacted.

The Canadian Centre for Cyber Security (the Cyber Centre) has urged users and administrators to review the provided web links and apply the necessary updates promptly. The vulnerabilities were disclosed in Broadcom's security advisories for VMware Cloud Foundation.

Broadcom has not yet released detailed technical descriptions of the flaws, but the Cyber Centre's notification emphasizes the critical nature of the updates. Organizations using the affected products are advised to prioritize patching to mitigate potential risks.