Broadcom Reactor Core — known CVE vulnerabilities

Every CVE whose affected-product data names Broadcom Reactor Core, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2026-47857 — CVSS 5.9 (medium): In Reactor Core, applications that use the Flux.windowTimeout operator with fairBackpressure enabled are vulnerable to a Denial of Service…
• CVE-2026-47863 — CVSS 5.9 (medium): In Reactor Core, applications that use the Flux.bufferTimeout operator with fairBackpressure enabled are vulnerable to a Denial of Service…