BR
Vendor
Brocade
184
CVEs
1
On KEV
61
New 30D
Products
FO9.8
Fabric OS
Brocade
62 CVEs1 on KEV43 new
BA8.8
Brocade Active Support Connectivity Gateway
Brocade
13 CVEs0 on KEV13 new
BS9.8
Brocade SAnnav
Brocade
32 CVEs0 on KEV4 new
AS6.1
Active Support Connectivity Gateway
Brocade
1 CVEs0 on KEV1 new
SA9.8
SANnav
Brocade
36 CVEs0 on KEV0 new
NA9.8
Network Advisor
Brocade
6 CVEs0 on KEV0 new
AS9.1
ASCG
Brocade
3 CVEs0 on KEV0 new
BF8.0
Brocade Fabric OS
Brocade
3 CVEs0 on KEV0 new
V5–
Vyatta 5400 Vrouter
Brocade
3 CVEs0 on KEV0 new
V5–
Vyatta 5400 Vrouter Software
Brocade
3 CVEs0 on KEV0 new
AD–
Adx
Brocade
1 CVEs0 on KEV0 new
BR–
Bigiron RX
Brocade
1 CVEs0 on KEV0 new
BR–
Bigiron RX Switch
Brocade
1 CVEs0 on KEV0 new
FA–
Fastiron
Brocade
1 CVEs0 on KEV0 new
IC–
Icx
Brocade
1 CVEs0 on KEV0 new
ML–
Mlx
Brocade
1 CVEs0 on KEV0 new
NC–
Netiron Cer
Brocade
1 CVEs0 on KEV0 new
NC7.5
Netiron Cer Series Firmware
Brocade
1 CVEs0 on KEV0 new
NC–
Netiron Ces
Brocade
1 CVEs0 on KEV0 new
NC7.5
Netiron Ces Series Firmware
Brocade
1 CVEs0 on KEV0 new
NM7.5
Netiron Mlx Series Firmware
Brocade
1 CVEs0 on KEV0 new
NO7.5
Netiron OS
Brocade
1 CVEs0 on KEV0 new
NX–
Netiron Xmr
Brocade
1 CVEs0 on KEV0 new
NX7.5
Netiron Xmr Series Firmware
Brocade
1 CVEs0 on KEV0 new
SI–
Silkworm
Brocade
1 CVEs0 on KEV0 new
SF–
Silkworm Fiber Channel Switch
Brocade
1 CVEs0 on KEV0 new
TU–
Turboiron
Brocade
1 CVEs0 on KEV0 new
VD–
Vdx
Brocade
1 CVEs0 on KEV0 new
VT8.0
Virtual Traffic Manager
Brocade
1 CVEs0 on KEV0 new
VY–
Vyatta
Brocade
1 CVEs0 on KEV0 new
VV–
Vyatta Vrouter
Brocade
1 CVEs0 on KEV0 new
VV–
Vyatta Vrouter Software
Brocade
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-87428 | BA Brocade Active Support Connectivity Gateway Brocade | 7.8 | Oct 8 | In Brocade ASCG before 3.5.0, a local unauthorized user on the ASCG VM who can issue a request to the SANnav host network namespace can extract stored management credentials for… |
| CVE-2026-87426 | BA Brocade Active Support Connectivity Gateway Brocade | 4.3 | Oct 8 | An unauthenticated network-based attacker can query specific internal management endpoints on Brocade ASCG versions before 3.5.0 to enumerate the configuration details and state… |
| CVE-2026-87425 | BA Brocade Active Support Connectivity Gateway Brocade | 6.8 | Oct 8 | An unauthenticated remote attacker can modify the TLS client trust store in Brocade ASCG versions before 3.5.0 |
| CVE-2026-87424 | BA Brocade Active Support Connectivity Gateway Brocade | 8.8 | Oct 8 | A vulnerability in the SupportLink API authentication component of Brocade ASCG versions prior to 3.5.0 allows an attacker to bypass authentication across deployments due to the… |
| CVE-2026-85490 | BA Brocade Active Support Connectivity Gateway Brocade | 8.8 | Oct 8 | When Brocade ASCG before 3.5.0 processes support bundle archives ingested from remote compromised endpoints, the application fails to sanitize path traversal sequences contained… |
| CVE-2026-85489 | BA Brocade Active Support Connectivity Gateway Brocade | 8.8 | Oct 8 | An authentication flaw exists in the Brocade ASCG administrative management service component |
| CVE-2026-85488 | BA Brocade Active Support Connectivity Gateway Brocade | 7.8 | Oct 8 | Brocade ASCG before 3.5.0 has a well-known Brocade default password embedded in a script distributed to every customer |
| CVE-2026-85487 | BA Brocade Active Support Connectivity Gateway Brocade | 8.8 | Oct 8 | A path traversal vulnerability exists in the HTTP service component of Brocade ASCG versions before 3.5.0 |
| CVE-2026-85486 | BA Brocade Active Support Connectivity Gateway Brocade | 8.0 | Oct 8 | Brocade ASCG before 3.5.0 improperly processes user input by evaluating form data prior to validation |
| CVE-2026-85423 | BA Brocade Active Support Connectivity Gateway Brocade | 8.8 | Oct 8 | A vulnerability has been identified in the data collection service of Brocade ASCG versions before 3.5.0 |
| CVE-2026-85422 | BA Brocade Active Support Connectivity Gateway Brocade | 7.8 | Oct 8 | A vulnerability in Brocade ASCG version before 3.5.0 could allow an attacker to obtain a static cryptographic key hardcoded into the software binaries to secure sensitive data at… |
| CVE-2026-85421 | BA Brocade Active Support Connectivity Gateway Brocade | 8.8 | Oct 8 | A critical security vulnerability has been identified in Brocade ASCG versions before 3.5.0 |
| CVE-2026-5769 | BS Brocade SANnav Brocade | 4.1 | Oct 8 | A vulnerability in Brocade SANnav before 3.0.1 can have the Brocade Fabric OS switch admin password captured in plaintext within a memory swap file on the server hosting the… |
| CVE-2026-5049 | BS Brocade SANnav Brocade | 5.7 | Oct 8 | A path traversal vulnerability affects the The Zone Alias Import flow feature in Brocade SANnav before 3.0.0a |
| CVE-2026-5048 | BS Brocade SANnav Brocade | 8.0 | Oct 8 | In Brocade SANnav before 3.0.0a, an SQL Injection vulnerability in various external API inventories have a vulnerability that allows an authenticated attacker to inject malicious… |
| CVE-2026-5047 | BS Brocade SANnav Brocade | 5.7 | Oct 8 | A vulnerability in Brocade SANnav before 2.4.0b and 3.0.0 prints encoded passwords and authentication tokens in log files |
| CVE-2023-5649 | BA Brocade Active Support Connectivity Gateway Brocade | 5.5 | Oct 8 | An Improper Input Validation vulnerability for the registered case credentials in Brocade ASCG before v3.0 could allow a local authenticated user to provide invalid inputs like… |
| CVE-2023-5648 | AS Active Support Connectivity Gateway Brocade | 6.1 | Oct 8 | In Brocade ASCG before Brocade ASCG v3.0, several security-related HTTP Headers were missing in various Brocade ASCG URL paths, aiding unauthenticated attackers to perform attacks… |
| CVE-2026-94585 | FO Fabric OS Brocade | 8.8 | Oct 8 | An authentication bypass vulnerability exists in the web management interface of Brocade Fabric OS versions before 9.2.2d running on the MXG610 platform |
| CVE-2026-94587 | FO Fabric OS Brocade | 4.5 | Oct 8 | A buffer overflow vulnerability exists in the WebTools administrative interface handling configuration download or file transfer operations of Brocade Fabric OS versions before… |
| CVE-2026-94579 | FO Fabric OS Brocade | 8.0 | Oct 8 | An OS command injection vulnerability exists in the PAM (Pluggable Authentication Module) session cleanup routines during SSH session termination on Brocade Fabric OS versions… |
| CVE-2026-94576 | FO Fabric OS Brocade | 8.0 | Oct 8 | An authentication logic and privilege escalation vulnerability exists in the account management interface of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 |
| CVE-2026-87661 | FO Fabric OS Brocade | 5.7 | Oct 8 | Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 directly accepts Apache configuration file data during service setup or re-initialization |
| CVE-2026-87677 | FO Fabric OS Brocade | 6.6 | Oct 8 | An OS command injection vulnerability exists in the account management subsystem of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 |
| CVE-2026-94586 | FO Fabric OS Brocade | 6.8 | Oct 8 | A command injection vulnerability exists in the WebTools administrative interface handling configuration download or file transfer operations of Brocade Fabric OS versions before… |
| CVE-2026-94581 | FO Fabric OS Brocade | 6.8 | Oct 8 | An OS command injection vulnerability exists in the REST API management interface of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 allows an authenticated,… |
| CVE-2026-94577 | FO Fabric OS Brocade | 7.8 | Oct 8 | A privilege escalation vulnerability exists in the internal Command-Line Interface (CLI) authorization handling mechanism of Brocade Fabric OS versions before 9.2.2d and 10.0.0… |
| CVE-2026-87664 | FO Fabric OS Brocade | 7.8 | Oct 8 | A session context forgery vulnerability exists in the web management daemon of Brocade Fabric OS versions 9.2.2d and 10.0.0 through 10.0.0a1 |
| CVE-2026-87663 | FO Fabric OS Brocade | 6.7 | Oct 8 | An authentication bypass and command injection vulnerability exists in the inter-switch remote execution service of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through… |
| CVE-2026-87662 | FO Fabric OS Brocade | 6.7 | Oct 8 | Brocade Fabric versions before 9.2.2d and 10.0.0 through 10.0.0a1 handling of specific download protocols utilizes unsanitized parameter strings |
| CVE-2026-87660 | FO Fabric OS Brocade | 7.1 | Oct 8 | An improper file permission and missing authorization vulnerability exists in the diagnostic kernel module subsystem of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through… |
| CVE-2026-87667 | FO Fabric OS Brocade | 4.5 | Oct 8 | An argument injection vulnerability exists in the configuration management command-line utility of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 |
| CVE-2026-87666 | FO Fabric OS Brocade | 8.0 | Oct 8 | An OS command injection vulnerability exists in the time and zone management subsystem of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 |
| CVE-2026-87675 | FO Fabric OS Brocade | 6.8 | Oct 8 | An OS command injection vulnerability exists in the configuration management subsystem of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 |
| CVE-2026-87674 | FO Fabric OS Brocade | 7.8 | Oct 8 | A local privilege escalation vulnerability exists in the system logging daemon of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 |
| CVE-2026-87673 | FO Fabric OS Brocade | 7.2 | Oct 8 | An OS command injection vulnerability exists in maintenance command-line diagnostic utilities on Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 |
| CVE-2026-87687 | FO Fabric OS Brocade | 7.3 | Oct 8 | An authorization and input validation vulnerability exists in Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 |
| CVE-2026-87685 | FO Fabric OS Brocade | 6.8 | Oct 8 | An arbitrary file manipulation vulnerability exists in the WebTools management interface of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 |
| CVE-2026-87688 | FO Fabric OS Brocade | 6.8 | Oct 8 | An input validation vulnerability exists in the security certificate management component of the Brocade Fabric OS administrative management API |
| CVE-2026-94584 | FO Fabric OS Brocade | 2.6 | Oct 8 | A race condition and thread-safety vulnerability exists in the web management daemon of Brocade Fabric OS versions before 10.0.1 |
| CVE-2026-94580 | FO Fabric OS Brocade | 4.5 | Oct 8 | An arbitrary file and directory deletion vulnerability exists in the REST API management interface handling USB storage operations on Brocade Fabric OS versions before 10.0.1 |
| CVE-2026-94575 | FO Fabric OS Brocade | 5.7 | Oct 8 | A logic vulnerability in Brocade Fabric OS versions before 10.0.1 web management framework allows an authenticated, low-privileged user to bypass inner Role-Based Access Control… |
| CVE-2026-94583 | FO Fabric OS Brocade | 2.6 | Oct 8 | A race condition vulnerability exists in the request processing logic of the REST management interface on Brocade Fabric OS versions before 10.0.1 |
| CVE-2026-94582 | FO Fabric OS Brocade | 7.8 | Oct 8 | A memory buffer overflow vulnerability exists in the internal diagnostic and route validation routines used by the Fabric Shortest Path First (FSPF) protocol component of Brocade… |
| CVE-2026-87668 | FO Fabric OS Brocade | 6.5 | Oct 8 | A stack-based buffer overflow vulnerability exists in the diagnostic execution utility of Brocade Fabric OS versions before 10.0.1 |
| CVE-2026-87665 | FO Fabric OS Brocade | 7.5 | Oct 8 | A stack-based buffer overflow vulnerability exists in the Internet Key Exchange (IKEv2) protocol handler on Brocade Fabric OS versions before 10.0.1 |
| CVE-2026-87672 | FO Fabric OS Brocade | 5.5 | Oct 8 | An information disclosure vulnerability exists in the SupportLink diagnostic collection utilities of Brocade Fabric OS versions before 10.0.1 |
| CVE-2026-87670 | FO Fabric OS Brocade | 4.3 | Oct 8 | An authorization logic vulnerability exists in the Brocade Fabric OS versions before 10.0.1 REST API gateway |
| CVE-2026-87669 | FO Fabric OS Brocade | 4.3 | Oct 8 | A missing authorization check in Brocade Fabric OS versions before 10.0.1 REST API interface of affected platform releases allows an authenticated user, regardless of their… |
| CVE-2026-87678 | FO Fabric OS Brocade | 5.2 | Oct 8 | An input validation and output encoding vulnerability exists in the web management interface of Brocade Fabric OS versions before 10.0.1 |
| CVE-2026-87676 | FO Fabric OS Brocade | 5.7 | Oct 8 | A stack-based buffer overflow vulnerability exists in the security library component of Brocade Fabric OS versions before 10.0.1 |
| CVE-2026-87686 | FO Fabric OS Brocade | 4.3 | Oct 8 | An authentication and access control bypass vulnerability exists in the web server management interface of Brocade Fabric OS versions before 10.0.1 |
| CVE-2026-94578 | FO Fabric OS Brocade | 8.8 | Oct 8 | Brocade Fabric OS versions before 10.0.1 contain an authorization logic vulnerability in the AAA (Authentication, Authorization, and Accounting) integration framework allows… |
| CVE-2026-87659 | FO Fabric OS Brocade | 9.8 | Oct 8 | A critical authorization bypass vulnerability exists in the Management Server handling of Brocade Fabric OS versions before 10.0.1 |
| CVE-2026-87671 | FO Fabric OS Brocade | 7.5 | Oct 8 | An out-of-bounds memory read vulnerability exists in the web management daemon of Brocade Fabric OS versions before 10.0.1 |
| CVE-2026-87684 | FO Fabric OS Brocade | 9.8 | Oct 8 | A stack-based buffer overflow vulnerability exists in the SNMP daemon request handling of Brocade Fabric versions before 10.0.1 |
| CVE-2026-87683 | FO Fabric OS Brocade | 8.8 | Oct 8 | Multiple stack-based buffer overflow vulnerabilities exist in the REST API management component of Brocade Fabric OS versions prior to 10.0.1 |
| CVE-2026-87682 | FO Fabric OS Brocade | 8.8 | Oct 8 | Multiple OS Command Injection vulnerabilities exist in the management interface and session processing routines of Brocade Fabric OS versions before 10.0.1 |
| CVE-2026-87681 | FO Fabric OS Brocade | 6.3 | Oct 8 | An Access Control Bypass vulnerability exists in the Role-Based Access Control (RBAC) validation engine of Brocade Fabric OS versions before 10.0.1 |
| CVE-2026-87680 | FO Fabric OS Brocade | 8.8 | Oct 8 | A command injection vulnerability in the REST API management interface of Brocade Fabric OS versions before 10.0.1 allows an authenticated user to execute arbitrary system… |