BR
Vendor
Broadcom
1,188
CVEs
14
On KEV
63
New 30D
Products
FO9.8
Fabric Operating System
Broadcom
146 CVEs2 on KEV43 new
BA9.1
Brocade Active Support Connectivity Gateway
Broadcom
18 CVEs0 on KEV14 new
BS9.8
Brocade Sannav
Broadcom
58 CVEs0 on KEV4 new
SE5.4
Symantec Endpoint Detection and Response
Broadcom
1 CVEs0 on KEV1 new
SG6.8
Symantec Ghost Solution Suite
Broadcom
1 CVEs0 on KEV1 new
VC9.8
Vmware Cloud Foundation
Broadcom
2 CVEs2 on KEV0 new
VV9.8
VMware vCenter Server
Broadcom
2 CVEs2 on KEV0 new
BF9.0
Brocade Fabric Operating System Firmware
Broadcom
26 CVEs1 on KEV0 new
SD9.8
Spring Data Commons
Broadcom
7 CVEs1 on KEV0 new
SM9.8
Symantec Messaging Gateway
Broadcom
6 CVEs1 on KEV0 new
BF6.7
Brocade Fabric OS
Broadcom
1 CVEs1 on KEV0 new
VA8.1
VMware Aria Operations
Broadcom
1 CVEs1 on KEV0 new
VA7.8
VMware Aria Operations and VMware Tools
Broadcom
1 CVEs1 on KEV0 new
VC9.8
Vmware Center Server
Broadcom
1 CVEs1 on KEV0 new
VV9.8
VMware vCenter
Broadcom
1 CVEs1 on KEV0 new
RS10.0
Rabbitmq Server
Broadcom
74 CVEs0 on KEV0 new
TC9.8
Tcpreplay
Broadcom
50 CVEs0 on KEV0 new
BA–
Brightstor Arcserve Backup
Broadcom
41 CVEs0 on KEV0 new
RC9.8
Raid Controller Web Interface
Broadcom
22 CVEs0 on KEV0 new
SA9.8
Sannav
Broadcom
20 CVEs0 on KEV0 new
BE–
Brightstor Enterprise Backup
Broadcom
19 CVEs0 on KEV0 new
AS9.8
Advanced Secure Gateway
Broadcom
16 CVEs0 on KEV0 new
BP–
Business Protection Suite
Broadcom
16 CVEs0 on KEV0 new
EA–
Etrust Antivirus
Broadcom
16 CVEs0 on KEV0 new
EI–
Etrust Intrusion Detection
Broadcom
16 CVEs0 on KEV0 new
IN–
Inoculateit
Broadcom
13 CVEs0 on KEV0 new
SP–
Server Protection Suite
Broadcom
13 CVEs0 on KEV0 new
SP9.8
Symantec Proxysg
Broadcom
13 CVEs0 on KEV0 new
AB–
Arcserve Backup
Broadcom
12 CVEs0 on KEV0 new
BA–
Brightstor Arcserve Backup Laptops Desktops
Broadcom
11 CVEs0 on KEV0 new
BF7.8
Brocade Fabric Operating System
Broadcom
11 CVEs0 on KEV0 new
EE–
Etrust EZ Antivirus
Broadcom
11 CVEs0 on KEV0 new
SC9.8
Symantec Critical System Protection
Broadcom
11 CVEs0 on KEV0 new
CA9.8
CA Api Developer Portal
Broadcom
10 CVEs0 on KEV0 new
DM–
Desktop Management Suite
Broadcom
10 CVEs0 on KEV0 new
DN9.8
DX Netops Spectrum
Broadcom
10 CVEs0 on KEV0 new
EE–
Etrust EZ Armor
Broadcom
10 CVEs0 on KEV0 new
ES–
Etrust Secure Content Manager
Broadcom
10 CVEs0 on KEV0 new
PA9.8
Privileged Access Manager
Broadcom
10 CVEs0 on KEV0 new
RN8.6
Reactor Netty
Broadcom
10 CVEs0 on KEV0 new
EA–
Etrust Antivirus Gateway
Broadcom
9 CVEs0 on KEV0 new
SW9.8
Spring Web Services
Broadcom
8 CVEs0 on KEV0 new
UN–
Unicenter Network And Systems Management
Broadcom
8 CVEs0 on KEV0 new
AF–
Anti-virus For The Enterprise
Broadcom
7 CVEs0 on KEV0 new
CA9.8
CA Automic Automation
Broadcom
7 CVEs0 on KEV0 new
CS–
Common Services
Broadcom
7 CVEs0 on KEV0 new
SD8.8
Symantec Data Center Security Server
Broadcom
7 CVEs0 on KEV0 new
UA–
Unicenter Asset Management
Broadcom
7 CVEs0 on KEV0 new
UR–
Unicenter Remote Control
Broadcom
7 CVEs0 on KEV0 new
VA9.8
Vmware Avi Load Balancer
Broadcom
7 CVEs0 on KEV0 new
EA–
Etrust Admin
Broadcom
6 CVEs0 on KEV0 new
EI–
Etrust Integrated Threat Management
Broadcom
6 CVEs0 on KEV0 new
IS–
Internet Security Suite
Broadcom
6 CVEs0 on KEV0 new
RA9.8
Release Automation
Broadcom
6 CVEs0 on KEV0 new
ST8.3
Spring Tools
Broadcom
6 CVEs0 on KEV0 new
SI8.8
Symantec Identity Governance And Administration
Broadcom
6 CVEs0 on KEV0 new
BP–
Brightstor Portal
Broadcom
5 CVEs0 on KEV0 new
BS–
Brightstor San Manager
Broadcom
5 CVEs0 on KEV0 new
DP–
Desktop Protection Suite
Broadcom
5 CVEs0 on KEV0 new
LS–
License Software
Broadcom
5 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-101034 New | SG Symantec Ghost Solution Suite Broadcom | 6.8 | Oct 27 | Security Advisory for offline recovery of Symantec GSS 3.3 RU11 stored domain credentials |
| CVE-2026-19810 | SE Symantec Endpoint Detection and Response Broadcom | 5.4 | Oct 13 | Cross-Site Scripting (XSS) in Symantec Endpoint Detection and Response Console |
| CVE-2026-87428 | BA Brocade Active Support Connectivity Gateway Broadcom | 7.8 | Oct 8 | In Brocade ASCG before 3.5.0, a local unauthorized user on the ASCG VM who can issue a request to the SANnav host network namespace can extract stored management credentials for… |
| CVE-2026-87426 | BA Brocade Active Support Connectivity Gateway Broadcom | 4.3 | Oct 8 | An unauthenticated network-based attacker can query specific internal management endpoints on Brocade ASCG versions before 3.5.0 to enumerate the configuration details and state… |
| CVE-2026-87425 | BA Brocade Active Support Connectivity Gateway Broadcom | 6.8 | Oct 8 | An unauthenticated remote attacker can modify the TLS client trust store in Brocade ASCG versions before 3.5.0 |
| CVE-2026-87424 | BA Brocade Active Support Connectivity Gateway Broadcom | 8.8 | Oct 8 | A vulnerability in the SupportLink API authentication component of Brocade ASCG versions prior to 3.5.0 allows an attacker to bypass authentication across deployments due to the… |
| CVE-2026-85490 | BA Brocade Active Support Connectivity Gateway Broadcom | 8.8 | Oct 8 | When Brocade ASCG before 3.5.0 processes support bundle archives ingested from remote compromised endpoints, the application fails to sanitize path traversal sequences contained… |
| CVE-2026-85489 | BA Brocade Active Support Connectivity Gateway Broadcom | 8.8 | Oct 8 | An authentication flaw exists in the Brocade ASCG administrative management service component |
| CVE-2026-85488 | BA Brocade Active Support Connectivity Gateway Broadcom | 7.8 | Oct 8 | Brocade ASCG before 3.5.0 has a well-known Brocade default password embedded in a script distributed to every customer |
| CVE-2026-85487 | BA Brocade Active Support Connectivity Gateway Broadcom | 8.8 | Oct 8 | A path traversal vulnerability exists in the HTTP service component of Brocade ASCG versions before 3.5.0 |
| CVE-2026-85486 | BA Brocade Active Support Connectivity Gateway Broadcom | 8.0 | Oct 8 | Brocade ASCG before 3.5.0 improperly processes user input by evaluating form data prior to validation |
| CVE-2026-85423 | BA Brocade Active Support Connectivity Gateway Broadcom | 8.8 | Oct 8 | A vulnerability has been identified in the data collection service of Brocade ASCG versions before 3.5.0 |
| CVE-2026-85422 | BA Brocade Active Support Connectivity Gateway Broadcom | 7.8 | Oct 8 | A vulnerability in Brocade ASCG version before 3.5.0 could allow an attacker to obtain a static cryptographic key hardcoded into the software binaries to secure sensitive data at… |
| CVE-2026-85421 | BA Brocade Active Support Connectivity Gateway Broadcom | 8.8 | Oct 8 | A critical security vulnerability has been identified in Brocade ASCG versions before 3.5.0 |
| CVE-2026-5769 | BS Brocade Sannav Broadcom | 4.1 | Oct 8 | A vulnerability in Brocade SANnav before 3.0.1 can have the Brocade Fabric OS switch admin password captured in plaintext within a memory swap file on the server hosting the… |
| CVE-2026-5049 | BS Brocade Sannav Broadcom | 5.7 | Oct 8 | A path traversal vulnerability affects the The Zone Alias Import flow feature in Brocade SANnav before 3.0.0a |
| CVE-2026-5048 | BS Brocade Sannav Broadcom | 8.0 | Oct 8 | In Brocade SANnav before 3.0.0a, an SQL Injection vulnerability in various external API inventories have a vulnerability that allows an authenticated attacker to inject malicious… |
| CVE-2026-5047 | BS Brocade Sannav Broadcom | 5.7 | Oct 8 | A vulnerability in Brocade SANnav before 2.4.0b and 3.0.0 prints encoded passwords and authentication tokens in log files |
| CVE-2023-5649 | BA Brocade Active Support Connectivity Gateway Broadcom | 5.5 | Oct 8 | An Improper Input Validation vulnerability for the registered case credentials in Brocade ASCG before v3.0 could allow a local authenticated user to provide invalid inputs like… |
| CVE-2023-5648 | BA Brocade Active Support Connectivity Gateway Broadcom | 6.1 | Oct 8 | In Brocade ASCG before Brocade ASCG v3.0, several security-related HTTP Headers were missing in various Brocade ASCG URL paths, aiding unauthenticated attackers to perform attacks… |
| CVE-2026-94585 | FO Fabric Operating System Broadcom | 8.8 | Oct 8 | An authentication bypass vulnerability exists in the web management interface of Brocade Fabric OS versions before 9.2.2d running on the MXG610 platform |
| CVE-2026-94587 | FO Fabric Operating System Broadcom | 4.5 | Oct 8 | A buffer overflow vulnerability exists in the WebTools administrative interface handling configuration download or file transfer operations of Brocade Fabric OS versions before… |
| CVE-2026-94579 | FO Fabric Operating System Broadcom | 8.0 | Oct 8 | An OS command injection vulnerability exists in the PAM (Pluggable Authentication Module) session cleanup routines during SSH session termination on Brocade Fabric OS versions… |
| CVE-2026-94576 | FO Fabric Operating System Broadcom | 8.0 | Oct 8 | An authentication logic and privilege escalation vulnerability exists in the account management interface of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 |
| CVE-2026-87661 | FO Fabric Operating System Broadcom | 5.7 | Oct 8 | Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 directly accepts Apache configuration file data during service setup or re-initialization |
| CVE-2026-87677 | FO Fabric Operating System Broadcom | 6.6 | Oct 8 | An OS command injection vulnerability exists in the account management subsystem of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 |
| CVE-2026-94586 | FO Fabric Operating System Broadcom | 6.8 | Oct 8 | A command injection vulnerability exists in the WebTools administrative interface handling configuration download or file transfer operations of Brocade Fabric OS versions before… |
| CVE-2026-94581 | FO Fabric Operating System Broadcom | 6.8 | Oct 8 | An OS command injection vulnerability exists in the REST API management interface of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 allows an authenticated,… |
| CVE-2026-94577 | FO Fabric Operating System Broadcom | 7.8 | Oct 8 | A privilege escalation vulnerability exists in the internal Command-Line Interface (CLI) authorization handling mechanism of Brocade Fabric OS versions before 9.2.2d and 10.0.0… |
| CVE-2026-87664 | FO Fabric Operating System Broadcom | 7.8 | Oct 8 | A session context forgery vulnerability exists in the web management daemon of Brocade Fabric OS versions 9.2.2d and 10.0.0 through 10.0.0a1 |
| CVE-2026-87663 | FO Fabric Operating System Broadcom | 6.7 | Oct 8 | An authentication bypass and command injection vulnerability exists in the inter-switch remote execution service of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through… |
| CVE-2026-87662 | FO Fabric Operating System Broadcom | 6.7 | Oct 8 | Brocade Fabric versions before 9.2.2d and 10.0.0 through 10.0.0a1 handling of specific download protocols utilizes unsanitized parameter strings |
| CVE-2026-87660 | FO Fabric Operating System Broadcom | 7.1 | Oct 8 | An improper file permission and missing authorization vulnerability exists in the diagnostic kernel module subsystem of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through… |
| CVE-2026-87667 | FO Fabric Operating System Broadcom | 4.5 | Oct 8 | An argument injection vulnerability exists in the configuration management command-line utility of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 |
| CVE-2026-87666 | FO Fabric Operating System Broadcom | 8.0 | Oct 8 | An OS command injection vulnerability exists in the time and zone management subsystem of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 |
| CVE-2026-87675 | FO Fabric Operating System Broadcom | 6.8 | Oct 8 | An OS command injection vulnerability exists in the configuration management subsystem of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 |
| CVE-2026-87674 | FO Fabric Operating System Broadcom | 7.8 | Oct 8 | A local privilege escalation vulnerability exists in the system logging daemon of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 |
| CVE-2026-87673 | FO Fabric Operating System Broadcom | 7.2 | Oct 8 | An OS command injection vulnerability exists in maintenance command-line diagnostic utilities on Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 |
| CVE-2026-87687 | FO Fabric Operating System Broadcom | 7.3 | Oct 8 | An authorization and input validation vulnerability exists in Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 |
| CVE-2026-87685 | FO Fabric Operating System Broadcom | 6.8 | Oct 8 | An arbitrary file manipulation vulnerability exists in the WebTools management interface of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 |
| CVE-2026-87688 | FO Fabric Operating System Broadcom | 6.8 | Oct 8 | An input validation vulnerability exists in the security certificate management component of the Brocade Fabric OS administrative management API |
| CVE-2026-94584 | FO Fabric Operating System Broadcom | 2.6 | Oct 8 | A race condition and thread-safety vulnerability exists in the web management daemon of Brocade Fabric OS versions before 10.0.1 |
| CVE-2026-94580 | FO Fabric Operating System Broadcom | 4.5 | Oct 8 | An arbitrary file and directory deletion vulnerability exists in the REST API management interface handling USB storage operations on Brocade Fabric OS versions before 10.0.1 |
| CVE-2026-94575 | FO Fabric Operating System Broadcom | 5.7 | Oct 8 | A logic vulnerability in Brocade Fabric OS versions before 10.0.1 web management framework allows an authenticated, low-privileged user to bypass inner Role-Based Access Control… |
| CVE-2026-94583 | FO Fabric Operating System Broadcom | 2.6 | Oct 8 | A race condition vulnerability exists in the request processing logic of the REST management interface on Brocade Fabric OS versions before 10.0.1 |
| CVE-2026-94582 | FO Fabric Operating System Broadcom | 7.8 | Oct 8 | A memory buffer overflow vulnerability exists in the internal diagnostic and route validation routines used by the Fabric Shortest Path First (FSPF) protocol component of Brocade… |
| CVE-2026-87668 | FO Fabric Operating System Broadcom | 6.5 | Oct 8 | A stack-based buffer overflow vulnerability exists in the diagnostic execution utility of Brocade Fabric OS versions before 10.0.1 |
| CVE-2026-87665 | FO Fabric Operating System Broadcom | 7.5 | Oct 8 | A stack-based buffer overflow vulnerability exists in the Internet Key Exchange (IKEv2) protocol handler on Brocade Fabric OS versions before 10.0.1 |
| CVE-2026-87672 | FO Fabric Operating System Broadcom | 5.5 | Oct 8 | An information disclosure vulnerability exists in the SupportLink diagnostic collection utilities of Brocade Fabric OS versions before 10.0.1 |
| CVE-2026-87670 | FO Fabric Operating System Broadcom | 4.3 | Oct 8 | An authorization logic vulnerability exists in the Brocade Fabric OS versions before 10.0.1 REST API gateway |
| CVE-2026-87669 | FO Fabric Operating System Broadcom | 4.3 | Oct 8 | A missing authorization check in Brocade Fabric OS versions before 10.0.1 REST API interface of affected platform releases allows an authenticated user, regardless of their… |
| CVE-2026-87678 | FO Fabric Operating System Broadcom | 5.2 | Oct 8 | An input validation and output encoding vulnerability exists in the web management interface of Brocade Fabric OS versions before 10.0.1 |
| CVE-2026-87676 | FO Fabric Operating System Broadcom | 5.7 | Oct 8 | A stack-based buffer overflow vulnerability exists in the security library component of Brocade Fabric OS versions before 10.0.1 |
| CVE-2026-87686 | FO Fabric Operating System Broadcom | 4.3 | Oct 8 | An authentication and access control bypass vulnerability exists in the web server management interface of Brocade Fabric OS versions before 10.0.1 |
| CVE-2026-94578 | FO Fabric Operating System Broadcom | 8.8 | Oct 8 | Brocade Fabric OS versions before 10.0.1 contain an authorization logic vulnerability in the AAA (Authentication, Authorization, and Accounting) integration framework allows… |
| CVE-2026-87659 | FO Fabric Operating System Broadcom | 9.8 | Oct 8 | A critical authorization bypass vulnerability exists in the Management Server handling of Brocade Fabric OS versions before 10.0.1 |
| CVE-2026-87671 | FO Fabric Operating System Broadcom | 7.5 | Oct 8 | An out-of-bounds memory read vulnerability exists in the web management daemon of Brocade Fabric OS versions before 10.0.1 |
| CVE-2026-87684 | FO Fabric Operating System Broadcom | 9.8 | Oct 8 | A stack-based buffer overflow vulnerability exists in the SNMP daemon request handling of Brocade Fabric versions before 10.0.1 |
| CVE-2026-87683 | FO Fabric Operating System Broadcom | 8.8 | Oct 8 | Multiple stack-based buffer overflow vulnerabilities exist in the REST API management component of Brocade Fabric OS versions prior to 10.0.1 |
| CVE-2026-87682 | FO Fabric Operating System Broadcom | 8.8 | Oct 8 | Multiple OS Command Injection vulnerabilities exist in the management interface and session processing routines of Brocade Fabric OS versions before 10.0.1 |
