CVE-2026-101034

UNKNOWN 0.0

Security Advisory for offline recovery of Symantec GSS 3.3 RU11 stored domain credentials

CVSS Score

0.0

EPSS Score

0.0%

EPSS Percentile

0th

An attacker who obtained the hardcoded key could decrypt domain/service account passwords, task run-as credentials, and sysprep passwords stored in or transmitted by GSS Deployment Server installation.

CWE	CWE-522
Vendor	broadcom
Product	symantec ghost solution suite
Ecosystems	Virtualization Networking
Industries	Technology
Published	Oct 27, 2026

Stay Ahead of the Next One

Get instant alerts for broadcom symantec ghost solution suite

Be the first to know when new unknown vulnerabilities affecting broadcom symantec ghost solution suite are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

Broadcom / Symantec Ghost Solution Suite

GSS_3.3_RU11 GSS_3.3_RU12 GSS_3.3.13

References

NVD ↗ CVE.org ↗ EPSS Data ↗

support.broadcom.com: https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/39440

Credits

Ken Nevers (https://www.linkedin.com/in/kennevers1337) Rotas Security (https://www.linkedin.com/company/rotas-security)