BR
Vendor
Brocade
110
CVEs
1
On KEV
61
New 30D
Products
FO9.8
Fabric OS
Brocade
46 CVEs1 on KEV43 new
BA8.8
Brocade Active Support Connectivity Gateway
Brocade
13 CVEs0 on KEV13 new
BS8.0
Brocade SANnav
Brocade
4 CVEs0 on KEV4 new
AS6.1
Active Support Connectivity Gateway
Brocade
1 CVEs0 on KEV1 new
SA8.7
SANnav
Brocade
10 CVEs0 on KEV0 new
NA9.8
Network Advisor
Brocade
6 CVEs0 on KEV0 new
V5–
Vyatta 5400 Vrouter
Brocade
3 CVEs0 on KEV0 new
V5–
Vyatta 5400 Vrouter Software
Brocade
3 CVEs0 on KEV0 new
AD–
Adx
Brocade
1 CVEs0 on KEV0 new
AS7.1
Ascg
Brocade
1 CVEs0 on KEV0 new
BR–
Bigiron RX
Brocade
1 CVEs0 on KEV0 new
BR–
Bigiron RX Switch
Brocade
1 CVEs0 on KEV0 new
BF5.5
Brocade Fabric OS
Brocade
1 CVEs0 on KEV0 new
FA–
Fastiron
Brocade
1 CVEs0 on KEV0 new
IC–
Icx
Brocade
1 CVEs0 on KEV0 new
ML–
Mlx
Brocade
1 CVEs0 on KEV0 new
NC–
Netiron Cer
Brocade
1 CVEs0 on KEV0 new
NC7.5
Netiron Cer Series Firmware
Brocade
1 CVEs0 on KEV0 new
NC–
Netiron Ces
Brocade
1 CVEs0 on KEV0 new
NC7.5
Netiron Ces Series Firmware
Brocade
1 CVEs0 on KEV0 new
NM7.5
Netiron Mlx Series Firmware
Brocade
1 CVEs0 on KEV0 new
NO7.5
Netiron OS
Brocade
1 CVEs0 on KEV0 new
NX–
Netiron Xmr
Brocade
1 CVEs0 on KEV0 new
NX7.5
Netiron Xmr Series Firmware
Brocade
1 CVEs0 on KEV0 new
SI–
Silkworm
Brocade
1 CVEs0 on KEV0 new
SF–
Silkworm Fiber Channel Switch
Brocade
1 CVEs0 on KEV0 new
TU–
Turboiron
Brocade
1 CVEs0 on KEV0 new
VD–
Vdx
Brocade
1 CVEs0 on KEV0 new
VT8.0
Virtual Traffic Manager
Brocade
1 CVEs0 on KEV0 new
VY–
Vyatta
Brocade
1 CVEs0 on KEV0 new
VV–
Vyatta Vrouter
Brocade
1 CVEs0 on KEV0 new
VV–
Vyatta Vrouter Software
Brocade
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-87428 | BA Brocade Active Support Connectivity Gateway Brocade | 7.8 | Oct 8 | In Brocade ASCG before 3.5.0, a local unauthorized user on the ASCG VM who can issue a request to the SANnav host network namespace can extract stored management credentials for… |
| CVE-2026-87426 | BA Brocade Active Support Connectivity Gateway Brocade | 4.3 | Oct 8 | An unauthenticated network-based attacker can query specific internal management endpoints on Brocade ASCG versions before 3.5.0 to enumerate the configuration details and state… |
| CVE-2026-87425 | BA Brocade Active Support Connectivity Gateway Brocade | 6.8 | Oct 8 | An unauthenticated remote attacker can modify the TLS client trust store in Brocade ASCG versions before 3.5.0 |
| CVE-2026-87424 | BA Brocade Active Support Connectivity Gateway Brocade | 8.8 | Oct 8 | A vulnerability in the SupportLink API authentication component of Brocade ASCG versions prior to 3.5.0 allows an attacker to bypass authentication across deployments due to the… |
| CVE-2026-85490 | BA Brocade Active Support Connectivity Gateway Brocade | 8.8 | Oct 8 | When Brocade ASCG before 3.5.0 processes support bundle archives ingested from remote compromised endpoints, the application fails to sanitize path traversal sequences contained… |
| CVE-2026-85489 | BA Brocade Active Support Connectivity Gateway Brocade | 8.8 | Oct 8 | An authentication flaw exists in the Brocade ASCG administrative management service component |
| CVE-2026-85488 | BA Brocade Active Support Connectivity Gateway Brocade | 7.8 | Oct 8 | Brocade ASCG before 3.5.0 has a well-known Brocade default password embedded in a script distributed to every customer |
| CVE-2026-85487 | BA Brocade Active Support Connectivity Gateway Brocade | 8.8 | Oct 8 | A path traversal vulnerability exists in the HTTP service component of Brocade ASCG versions before 3.5.0 |
| CVE-2026-85486 | BA Brocade Active Support Connectivity Gateway Brocade | 8.0 | Oct 8 | Brocade ASCG before 3.5.0 improperly processes user input by evaluating form data prior to validation |
| CVE-2026-85423 | BA Brocade Active Support Connectivity Gateway Brocade | 8.8 | Oct 8 | A vulnerability has been identified in the data collection service of Brocade ASCG versions before 3.5.0 |
| CVE-2026-85422 | BA Brocade Active Support Connectivity Gateway Brocade | 7.8 | Oct 8 | A vulnerability in Brocade ASCG version before 3.5.0 could allow an attacker to obtain a static cryptographic key hardcoded into the software binaries to secure sensitive data at… |
| CVE-2026-85421 | BA Brocade Active Support Connectivity Gateway Brocade | 8.8 | Oct 8 | A critical security vulnerability has been identified in Brocade ASCG versions before 3.5.0 |
| CVE-2026-5769 | BS Brocade SANnav Brocade | 4.1 | Oct 8 | A vulnerability in Brocade SANnav before 3.0.1 can have the Brocade Fabric OS switch admin password captured in plaintext within a memory swap file on the server hosting the… |
| CVE-2026-5049 | BS Brocade SANnav Brocade | 5.7 | Oct 8 | A path traversal vulnerability affects the The Zone Alias Import flow feature in Brocade SANnav before 3.0.0a |
| CVE-2026-5048 | BS Brocade SANnav Brocade | 8.0 | Oct 8 | In Brocade SANnav before 3.0.0a, an SQL Injection vulnerability in various external API inventories have a vulnerability that allows an authenticated attacker to inject malicious… |
| CVE-2026-5047 | BS Brocade SANnav Brocade | 5.7 | Oct 8 | A vulnerability in Brocade SANnav before 2.4.0b and 3.0.0 prints encoded passwords and authentication tokens in log files |
| CVE-2023-5649 | BA Brocade Active Support Connectivity Gateway Brocade | 5.5 | Oct 8 | An Improper Input Validation vulnerability for the registered case credentials in Brocade ASCG before v3.0 could allow a local authenticated user to provide invalid inputs like… |
| CVE-2023-5648 | AS Active Support Connectivity Gateway Brocade | 6.1 | Oct 8 | In Brocade ASCG before Brocade ASCG v3.0, several security-related HTTP Headers were missing in various Brocade ASCG URL paths, aiding unauthenticated attackers to perform attacks… |
| CVE-2026-94585 | FO Fabric OS Brocade | 8.8 | Oct 8 | An authentication bypass vulnerability exists in the web management interface of Brocade Fabric OS versions before 9.2.2d running on the MXG610 platform |
| CVE-2026-94587 | FO Fabric OS Brocade | 4.5 | Oct 8 | A buffer overflow vulnerability exists in the WebTools administrative interface handling configuration download or file transfer operations of Brocade Fabric OS versions before… |
| CVE-2026-94579 | FO Fabric OS Brocade | 8.0 | Oct 8 | An OS command injection vulnerability exists in the PAM (Pluggable Authentication Module) session cleanup routines during SSH session termination on Brocade Fabric OS versions… |
| CVE-2026-94576 | FO Fabric OS Brocade | 8.0 | Oct 8 | An authentication logic and privilege escalation vulnerability exists in the account management interface of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 |
| CVE-2026-87661 | FO Fabric OS Brocade | 5.7 | Oct 8 | Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 directly accepts Apache configuration file data during service setup or re-initialization |
| CVE-2026-87677 | FO Fabric OS Brocade | 6.6 | Oct 8 | An OS command injection vulnerability exists in the account management subsystem of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 |
| CVE-2026-94586 | FO Fabric OS Brocade | 6.8 | Oct 8 | A command injection vulnerability exists in the WebTools administrative interface handling configuration download or file transfer operations of Brocade Fabric OS versions before… |
| CVE-2026-94581 | FO Fabric OS Brocade | 6.8 | Oct 8 | An OS command injection vulnerability exists in the REST API management interface of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 allows an authenticated,… |
| CVE-2026-94577 | FO Fabric OS Brocade | 7.8 | Oct 8 | A privilege escalation vulnerability exists in the internal Command-Line Interface (CLI) authorization handling mechanism of Brocade Fabric OS versions before 9.2.2d and 10.0.0… |
| CVE-2026-87664 | FO Fabric OS Brocade | 7.8 | Oct 8 | A session context forgery vulnerability exists in the web management daemon of Brocade Fabric OS versions 9.2.2d and 10.0.0 through 10.0.0a1 |
| CVE-2026-87663 | FO Fabric OS Brocade | 6.7 | Oct 8 | An authentication bypass and command injection vulnerability exists in the inter-switch remote execution service of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through… |
| CVE-2026-87662 | FO Fabric OS Brocade | 6.7 | Oct 8 | Brocade Fabric versions before 9.2.2d and 10.0.0 through 10.0.0a1 handling of specific download protocols utilizes unsanitized parameter strings |
| CVE-2026-87660 | FO Fabric OS Brocade | 7.1 | Oct 8 | An improper file permission and missing authorization vulnerability exists in the diagnostic kernel module subsystem of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through… |
| CVE-2026-87667 | FO Fabric OS Brocade | 4.5 | Oct 8 | An argument injection vulnerability exists in the configuration management command-line utility of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 |
| CVE-2026-87666 | FO Fabric OS Brocade | 8.0 | Oct 8 | An OS command injection vulnerability exists in the time and zone management subsystem of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 |
| CVE-2026-87675 | FO Fabric OS Brocade | 6.8 | Oct 8 | An OS command injection vulnerability exists in the configuration management subsystem of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 |
| CVE-2026-87674 | FO Fabric OS Brocade | 7.8 | Oct 8 | A local privilege escalation vulnerability exists in the system logging daemon of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 |
| CVE-2026-87673 | FO Fabric OS Brocade | 7.2 | Oct 8 | An OS command injection vulnerability exists in maintenance command-line diagnostic utilities on Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 |
| CVE-2026-87687 | FO Fabric OS Brocade | 7.3 | Oct 8 | An authorization and input validation vulnerability exists in Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 |
| CVE-2026-87685 | FO Fabric OS Brocade | 6.8 | Oct 8 | An arbitrary file manipulation vulnerability exists in the WebTools management interface of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 |
| CVE-2026-87688 | FO Fabric OS Brocade | 6.8 | Oct 8 | An input validation vulnerability exists in the security certificate management component of the Brocade Fabric OS administrative management API |
| CVE-2026-94584 | FO Fabric OS Brocade | 2.6 | Oct 8 | A race condition and thread-safety vulnerability exists in the web management daemon of Brocade Fabric OS versions before 10.0.1 |
| CVE-2026-94580 | FO Fabric OS Brocade | 4.5 | Oct 8 | An arbitrary file and directory deletion vulnerability exists in the REST API management interface handling USB storage operations on Brocade Fabric OS versions before 10.0.1 |
| CVE-2026-94575 | FO Fabric OS Brocade | 5.7 | Oct 8 | A logic vulnerability in Brocade Fabric OS versions before 10.0.1 web management framework allows an authenticated, low-privileged user to bypass inner Role-Based Access Control… |
| CVE-2026-94583 | FO Fabric OS Brocade | 2.6 | Oct 8 | A race condition vulnerability exists in the request processing logic of the REST management interface on Brocade Fabric OS versions before 10.0.1 |
| CVE-2026-94582 | FO Fabric OS Brocade | 7.8 | Oct 8 | A memory buffer overflow vulnerability exists in the internal diagnostic and route validation routines used by the Fabric Shortest Path First (FSPF) protocol component of Brocade… |
| CVE-2026-87668 | FO Fabric OS Brocade | 6.5 | Oct 8 | A stack-based buffer overflow vulnerability exists in the diagnostic execution utility of Brocade Fabric OS versions before 10.0.1 |
| CVE-2026-87665 | FO Fabric OS Brocade | 7.5 | Oct 8 | A stack-based buffer overflow vulnerability exists in the Internet Key Exchange (IKEv2) protocol handler on Brocade Fabric OS versions before 10.0.1 |
| CVE-2026-87672 | FO Fabric OS Brocade | 5.5 | Oct 8 | An information disclosure vulnerability exists in the SupportLink diagnostic collection utilities of Brocade Fabric OS versions before 10.0.1 |
| CVE-2026-87670 | FO Fabric OS Brocade | 4.3 | Oct 8 | An authorization logic vulnerability exists in the Brocade Fabric OS versions before 10.0.1 REST API gateway |
| CVE-2026-87669 | FO Fabric OS Brocade | 4.3 | Oct 8 | A missing authorization check in Brocade Fabric OS versions before 10.0.1 REST API interface of affected platform releases allows an authenticated user, regardless of their… |
| CVE-2026-87678 | FO Fabric OS Brocade | 5.2 | Oct 8 | An input validation and output encoding vulnerability exists in the web management interface of Brocade Fabric OS versions before 10.0.1 |
| CVE-2026-87676 | FO Fabric OS Brocade | 5.7 | Oct 8 | A stack-based buffer overflow vulnerability exists in the security library component of Brocade Fabric OS versions before 10.0.1 |
| CVE-2026-87686 | FO Fabric OS Brocade | 4.3 | Oct 8 | An authentication and access control bypass vulnerability exists in the web server management interface of Brocade Fabric OS versions before 10.0.1 |
| CVE-2026-94578 | FO Fabric OS Brocade | 8.8 | Oct 8 | Brocade Fabric OS versions before 10.0.1 contain an authorization logic vulnerability in the AAA (Authentication, Authorization, and Accounting) integration framework allows… |
| CVE-2026-87659 | FO Fabric OS Brocade | 9.8 | Oct 8 | A critical authorization bypass vulnerability exists in the Management Server handling of Brocade Fabric OS versions before 10.0.1 |
| CVE-2026-87671 | FO Fabric OS Brocade | 7.5 | Oct 8 | An out-of-bounds memory read vulnerability exists in the web management daemon of Brocade Fabric OS versions before 10.0.1 |
| CVE-2026-87684 | FO Fabric OS Brocade | 9.8 | Oct 8 | A stack-based buffer overflow vulnerability exists in the SNMP daemon request handling of Brocade Fabric versions before 10.0.1 |
| CVE-2026-87683 | FO Fabric OS Brocade | 8.8 | Oct 8 | Multiple stack-based buffer overflow vulnerabilities exist in the REST API management component of Brocade Fabric OS versions prior to 10.0.1 |
| CVE-2026-87682 | FO Fabric OS Brocade | 8.8 | Oct 8 | Multiple OS Command Injection vulnerabilities exist in the management interface and session processing routines of Brocade Fabric OS versions before 10.0.1 |
| CVE-2026-87681 | FO Fabric OS Brocade | 6.3 | Oct 8 | An Access Control Bypass vulnerability exists in the Role-Based Access Control (RBAC) validation engine of Brocade Fabric OS versions before 10.0.1 |
| CVE-2026-87680 | FO Fabric OS Brocade | 8.8 | Oct 8 | A command injection vulnerability in the REST API management interface of Brocade Fabric OS versions before 10.0.1 allows an authenticated user to execute arbitrary system… |