CVE-2026-15380 Broadcom CVE debrief

Who should care

Users of ITMS 8.7.3 should verify their inventory and check for vendor remediation. This includes operators, platform administrators, vulnerability management teams, and security teams who need to assess the impact of this vulnerability on their systems.

Technical summary

CVE-2026-15380 allows a non-administrator interactive user to gain full SYSTEM code execution via a DCOM/task scheduler logic chain, without requiring network access or memory corruption. This vulnerability affects ITMS 8.7.3 and has a medium CVSS score of 5.1. The vulnerability has a medium severity and requires no network access or memory corruption.

Defensive priority

Medium priority due to the medium CVSS score of 5.1.

Recommended defensive actions

• Verify inventory for ITMS 8.7.3
• Check for vendor remediation
• Implement compensating controls
• Monitor for suspicious activity
• Review relevant monitoring, detection, and logs for exposed assets that need extra review

Evidence notes

Evidence is limited; primary official records indicate a medium severity vulnerability in ITMS 8.7.3. Further verification is needed. The CVE record was published on 2026-07-17T08:16:58.913Z and has not been modified since. Official records suggest a DCOM/task scheduler logic chain vulnerability. Limited source detail is available, and defenders should verify their inventory and check for vendor remediation.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.