Broadcom - vulnerabilities (CVEs)
865 CVEs in 414 products, 63 in the last 30 days, newest from 2026-10-27.
Products
- Fabric Operating System - 146 CVEs
- Rabbitmq Server - 74 CVEs
- Brocade Sannav - 58 CVEs
- Tcpreplay - 50 CVEs
- Brightstor Arcserve Backup - 41 CVEs
- Brocade Fabric Operating System Firmware - 26 CVEs
- Lsi Storage Authority Lsa - 22 CVEs
- Raid Controller Web Interface - 22 CVEs
- Sannav - 20 CVEs
- Brightstor Enterprise Backup - 19 CVEs
- Brocade Active Support Connectivity Gateway - 18 CVEs
- Symantec Privileged Access Management - 18 CVEs
- Advanced Secure Gateway - 16 CVEs
- Business Protection Suite - 16 CVEs
- Etrust Antivirus - 16 CVEs
- Etrust Intrusion Detection - 16 CVEs
- Bcm5820x - 13 CVEs
- Inoculateit - 13 CVEs
- Server Protection Suite - 13 CVEs
- Symantec Proxysg - 13 CVEs
- Arcserve Backup - 12 CVEs
- Brocade Fabric Operating System - 12 CVEs
- Brightstor Arcserve Backup Laptops Desktops - 11 CVEs
- Etrust Ez Antivirus - 11 CVEs
- Symantec Critical System Protection - 11 CVEs
- Ca Api Developer Portal - 10 CVEs
- Desktop Management Suite - 10 CVEs
- Dx Netops Spectrum - 10 CVEs
- Etrust Ez Armor - 10 CVEs
- Etrust Secure Content Manager - 10 CVEs
- Privileged Access Manager - 10 CVEs
- Reactor Netty - 10 CVEs
- Etrust Antivirus Gateway - 9 CVEs
- Spring Web Services - 8 CVEs
- Unicenter Network And Systems Management - 8 CVEs
- Anti-virus For The Enterprise - 7 CVEs
- Ca Automic Automation - 7 CVEs
- Common Services - 7 CVEs
- Lsi Storage Authority - 7 CVEs
- Spring Data Commons - 7 CVEs
- Symantec Data Center Security Server - 7 CVEs
- Unicenter Asset Management - 7 CVEs
- Unicenter Remote Control - 7 CVEs
- Vmware Avi Load Balancer - 7 CVEs
- Etrust Admin - 6 CVEs
- Etrust Integrated Threat Management - 6 CVEs
- Internet Security Suite - 6 CVEs
- Release Automation - 6 CVEs
- Spring Tools - 6 CVEs
- Symantec Identity Governance And Administration - 6 CVEs
- Symantec Messaging Gateway - 6 CVEs
- Brightstor Portal - 5 CVEs
- Brightstor San Manager - 5 CVEs
- Desktop Protection Suite - 5 CVEs
- License Software - 5 CVEs
- Project Portfolio Management - 5 CVEs
- Secure Content Manager - 5 CVEs
- Spring Batch - 5 CVEs
- Unicenter Tng - 5 CVEs
- Advantage Data Transport - 4 CVEs
- Cleverpath Ecm - 4 CVEs
- Cleverpath Olap - 4 CVEs
- Cleverpath Predictive Analysis Server - 4 CVEs
- Content Analysis - 4 CVEs
- Emulex Hba Manager - 4 CVEs
- Network And Systems Management - 4 CVEs
- Spring Authorization Server - 4 CVEs
- Spring Web Flow - 4 CVEs
- Symantec Data Center Security Server And Agents - 4 CVEs
- Symantec Embedded Security Critical System Protection - 4 CVEs
- Symantec Embedded Security Critical System Protection For Controllers And Devices - 4 CVEs
- Total Defense - 4 CVEs
- Unicenter Application Performance Monitor - 4 CVEs
- Unicenter Data Transport Option - 4 CVEs
- Unicenter Jasmine - 4 CVEs
- Unicenter Service Level Management - 4 CVEs
- Unicenter Software Delivery - 4 CVEs
- Unified Infrastructure Management - 4 CVEs
- Adviseit - 3 CVEs
- Anti-virus - 3 CVEs
- Anti-virus Sdk - 3 CVEs
- Arcserve Backup 2000 - 3 CVEs
- Bcm4355c0 Firmware - 3 CVEs
- Brightstor Hierarchical Storage Manager - 3 CVEs
- Brightstor Mobile Backup - 3 CVEs
- Brocade Ascg - 3 CVEs
- Cleverpath Aion - 3 CVEs
- Cleverpath Portal - 3 CVEs
- Ehealth - 3 CVEs
- Etrust Antivirus Webscan - 3 CVEs
- Etrust Security Command Center - 3 CVEs
- Integrated Threat Management - 3 CVEs
- Service Desk Manager - 3 CVEs
- Siteminder - 3 CVEs
- Symantec Endpoint Protection - 3 CVEs
- Symantec Identity Manager - 3 CVEs
- Symantec It Management Suite - 3 CVEs
- Symantec Siteminder - 3 CVEs
- Unicenter Nsm Wireless Network Management Option - 3 CVEs
- Unicenter Performance Management - 3 CVEs
- Vmware Cloud Foundation - 3 CVEs
- Vmware Nsx - 3 CVEs
- Vmware Nsx-t Data Center - 3 CVEs
- Widcomm Bluetooth - 3 CVEs
- Anti-spyware - 2 CVEs
- Antispyware For The Enterprise - 2 CVEs
- Bcm2711 - 2 CVEs
- Bcm4339 Firmware - 2 CVEs
- Brcmfmac Driver - 2 CVEs
- Brcmfmac Wifi Driver - 2 CVEs
- Brocade Network Advisor - 2 CVEs
- Ca Client Automation - 2 CVEs
- Ca Workload Automation Ae - 2 CVEs
- Erwin Process Modeler - 2 CVEs
- Etrust Antivirus Ee - 2 CVEs
- Etrust Pestpatrol - 2 CVEs
- Etrust Siteminder - 2 CVEs
- Messaging - 2 CVEs
- Reactor Core - 2 CVEs
- Single Sign-on - 2 CVEs
- Spectrum - 2 CVEs
- Symantec Endpoint Protection Windows Client - 2 CVEs
- Symantec Pgp Encryption - 2 CVEs
- Unicenter Management Portal - 2 CVEs
- Unicenter Remote Control Host - 2 CVEs
- Vmware Center Server - 2 CVEs
- Wifi Drivers - 2 CVEs
- 2e Web Option - 1 CVEs
- 8.6.it Management Suite - 1 CVEs
- Adsl - 1 CVEs
- Alert Notification Server - 1 CVEs
- Anti-spyware For The Enterprise - 1 CVEs
- Anti Virus Sdk - 1 CVEs
- Antivirus Gateway - 1 CVEs
- Antivirus Sdk - 1 CVEs
- Api Gateway - 1 CVEs
- Arcserve Client Agent - 1 CVEs
- Automic Automation - 1 CVEs
- Automic Workload Automation - 1 CVEs
- Bcm43012 Firmware - 1 CVEs
- Bcm43013 Firmware - 1 CVEs
- Bcm4325 - 1 CVEs
- Bcm4329 - 1 CVEs
- Bcm4335c0 Firmware - 1 CVEs
- Bcm4339 Soc Firmware - 1 CVEs
- Bcm43438a1 Firmware - 1 CVEs
- Bcm4352 Firmware - 1 CVEs
- Bcm4356 Firmware - 1 CVEs
- Bcm43684 Firmware - 1 CVEs
- Bcm43752 Firmware - 1 CVEs
- Bcm4375 Firmware - 1 CVEs
- Bcm4389 Firmware - 1 CVEs
- Bcm43xx Wi-fi Chipset Firmware - 1 CVEs
- Bcmwl5.sys Wireless Device Driver - 1 CVEs
- Bitnami - 1 CVEs
- Bitnami/pgpool - 1 CVEs
- Bluecoat Security Gateway - 1 CVEs
- Bluetooth Stack - 1 CVEs
- Brightstor Arcserve Backup Hp - 1 CVEs
- Brightstor Arcserve Backup Server - 1 CVEs
- Brightstor Arcserve Client - 1 CVEs
- Brightstor Process Automation Manager - 1 CVEs
- Brightstor Storage Resource Manager - 1 CVEs
- Brigthstor Arcserve Client For Windows - 1 CVEs
- Broadcom - 1 CVEs
- Broadcom Linux - 1 CVEs
- Brocade Fabric Os - 1 CVEs
- Ca Automic Dollar Universe - 1 CVEs
- Ca Automic Sysload - 1 CVEs
- Ca Clarity - 1 CVEs
- Ca Client Automation Itcm - 1 CVEs
- Ca Ehealth Performance Manager - 1 CVEs
- Ca Harvest Software Change Manager - 1 CVEs
- Ca Identity Governance - 1 CVEs
- Ca Identity Suite Virtual Appliance - 1 CVEs
- Ca Network Flow Analysis - 1 CVEs
- Ca Performance Management - 1 CVEs
- Ca Service Catalog - 1 CVEs
- Ccc Harvest - 1 CVEs
- Clarity - 1 CVEs
- Client Automation - 1 CVEs
- Controlit - 1 CVEs
- Data Loss Prevention - 1 CVEs
- Directory - 1 CVEs
- Erwin Data Model Validator - 1 CVEs
- Etrust Access Control - 1 CVEs
- Etrust Antivirus Iris Engine - 1 CVEs
- Etrust Antivirus Sdk - 1 CVEs
- Etrust Audit Aries - 1 CVEs
- Etrust Audit Client - 1 CVEs
- Etrust Audit Datatools - 1 CVEs
- Etrust Audit Irecorder - 1 CVEs
- Etrust Audit Policy Manager - 1 CVEs
- Etrust Ez Armor Le - 1 CVEs
- Etrust Identity Minder - 1 CVEs
- Etrust Internet Security Suite - 1 CVEs
- Etrust Threat Management Console - 1 CVEs
- Hardmac Wi-fi Soc Firmware - 1 CVEs
- Host-based Intrusion Prevention System - 1 CVEs
- Igateway - 1 CVEs
- Inoculan - 1 CVEs
- Inoculateit Agent For Exchange - 1 CVEs
- Investigation Tool - 1 CVEs
- Itechnology Igateway - 1 CVEs
- Layer7 Api Management Oauth Toolkit - 1 CVEs
- Layer 7 Api Gateway - 1 CVEs
- Lsi Pci-sv92ex Firmware - 1 CVEs
- Message Queuing - 1 CVEs
- Mlink - 1 CVEs
- Netmaster File Transfer Management - 1 CVEs
- Netmaster Network Management For Tcp/ip - 1 CVEs
- Network Flow Analysis - 1 CVEs
- Network Operations - 1 CVEs
- Nolio - 1 CVEs
- One Command Manager - 1 CVEs
- Output Management Web Viewer - 1 CVEs
- Pipa C211 - 1 CVEs
- Pipa C211 Web Interface - 1 CVEs
- Proxysg - 1 CVEs
- Resource Initialization Manager - 1 CVEs
- Service Desk - 1 CVEs
- Spring Cloud Commons - 1 CVEs
- Spring Cloud Sleuth - 1 CVEs
- Spring Data Keyvalue - 1 CVEs
- Spring Data Redis - 1 CVEs
- Spring Data Relational - 1 CVEs
- Spring Rest Docs - 1 CVEs
- Spring Retry - 1 CVEs
- Spring Statemachine - 1 CVEs
- Ssl Visibility Appliance - 1 CVEs
- Symantec Advanced Secure Gateway 500-10 Firmware - 1 CVEs
- Symantec Advanced Secure Gateway S200-30 Firmware - 1 CVEs
- Symantec Advanced Secure Gateway S200-40 Firmware - 1 CVEs
- Symantec Advanced Secure Gateway S400-20 Firmware - 1 CVEs
- Symantec Advanced Secure Gateway S400-30 Firmware - 1 CVEs
- Symantec Advanced Secure Gateway S400-40 Firmware - 1 CVEs
- Symantec Advanced Secure Gateway S500-20 Firmware - 1 CVEs
- Symantec Deployment Solutions - 1 CVEs
- Symantec Endpoint Detection And Response - 1 CVEs
- Symantec Endpoint Protection Cleanwipe Removal Tool - 1 CVEs
- Symantec Eraser Engine - 1 CVEs
- Symantec Ghost Solution Suite - 1 CVEs
- Symantec Intelligencecenter - 1 CVEs
- Symantec Management Suite - 1 CVEs
- Symantec Server Management Suite - 1 CVEs
- Symantec Siteminder Webagent - 1 CVEs
- Symantec Web Security Services Agent - 1 CVEs
- Systemedge - 1 CVEs
- Systems Performance For Infrastructure Managers - 1 CVEs
- Threat Manager - 1 CVEs
- Unicenter Asset Portfolio Management - 1 CVEs
- Unicenter Autosys Jm - 1 CVEs
- Unicenter Remote Control Option - 1 CVEs
- Unicenter Service Delivery - 1 CVEs
- Unicenter Service Desk - 1 CVEs
- Unicenter Service Desk Knowledge Tools - 1 CVEs
- Unicenter Service Fulfillment - 1 CVEs
- Unicenter Service Metric Analysis - 1 CVEs
- Unicenter Serviceplus Service Desk - 1 CVEs
- Vmware Ace Management Server - 1 CVEs
- Vmware Vcenter Server - 1 CVEs
- Xcom Data Transport - 1 CVEs
- Advanced Control Suite - 0 CVEs
- Advanced Threat Protection - 0 CVEs
- Application Configuration Manager Agent - 0 CVEs
- Arcserve Backup Agent For Open Files For Windows - 0 CVEs
- Arcserve Backup Client Agent For Windows - 0 CVEs
- Asf Management Applications - 0 CVEs
- Asset Management Performance Liteagent - 0 CVEs
- Backup Exec System Recovery - 0 CVEs
- Bcm43012 - 0 CVEs
- Bcm43013 - 0 CVEs
- Bcm43162 - 0 CVEs
- Bcm43224 - 0 CVEs
- Bcm4323 - 0 CVEs
- Bcm4335c0 - 0 CVEs
- Bcm4339 - 0 CVEs
- Bcm4339 Soc - 0 CVEs
- Bcm43438a1 - 0 CVEs
- Bcm4352 - 0 CVEs
- Bcm4354 Wi-fi Chipset - 0 CVEs
- Bcm4355c0 - 0 CVEs
- Bcm4356 - 0 CVEs
- Bcm4358 Wi-fi Chipset - 0 CVEs
- Bcm4359 Wi-fi Chipset - 0 CVEs
- Bcm43684 - 0 CVEs
- Bcm43694 - 0 CVEs
- Bcm4375 - 0 CVEs
- Bcm43752 - 0 CVEs
- Bcm4389 - 0 CVEs
- Bcm47622 - 0 CVEs
- Bcm5780 - 0 CVEs
- Bcm6710 - 0 CVEs
- Bcm6750 - 0 CVEs
- Bcm6752 - 0 CVEs
- Bcm6755 - 0 CVEs
- Brightstor Arcserve - 0 CVEs
- Brightstor Arcserve Backup Agent Exchange - 0 CVEs
- Brightstor Arcserve Backup Agent Sap - 0 CVEs
- Brightstor Arcserve Backup Agent Sql - 0 CVEs
- Brightstor Arcserve Backup Aix - 0 CVEs
- Brightstor Arcserve Backup For Windows - 0 CVEs
- Brightstor Enterprise - 0 CVEs
- Brightstor Enterprise Backup Agent - 0 CVEs
- Brocade 300 - 0 CVEs
- Brocade 610 - 0 CVEs
- Brocade 6505 - 0 CVEs
- Brocade 6510 - 0 CVEs
- Brocade 6520 - 0 CVEs
- Brocade 6547 - 0 CVEs
- Brocade 7800 - 0 CVEs
- Brocade 7810 - 0 CVEs
- Brocade 7840 - 0 CVEs
- Brocade G620 - 0 CVEs
- Brocade G630 - 0 CVEs
- Brocade X6-4 Director - 0 CVEs
- Brocade X6-8 Director - 0 CVEs
- Business Intelligence - 0 CVEs
- Ca Identity Manager - 0 CVEs
- Ca Privileged Access Manager - 0 CVEs
- Ca Spectrum - 0 CVEs
- Cleverpath Eureka - 0 CVEs
- Client Intrusion Detection System - 0 CVEs
- Cohesion Agent - 0 CVEs
- Cohesion Server - 0 CVEs
- Configuration Automation Agent - 0 CVEs
- Configuration Automation Grid Node - 0 CVEs
- Configuration Automation Server - 0 CVEs
- Ehealth For Voice - 0 CVEs
- Ehealth Livehealth - 0 CVEs
- Ehealth Systemedge - 0 CVEs
- Email Security.cloud - 0 CVEs
- Embedded Entitlements Manager - 0 CVEs
- Endpoint Protection Cloud - 0 CVEs
- Endpoint Protection Cloud Agent - 0 CVEs
- Endpoint Protection For Small Business - 0 CVEs
- Endpoint Protection Manager - 0 CVEs
- Enterprise Common Services - 0 CVEs
- Enterprise Log Manager - 0 CVEs
- Erwin Data Modeler - 0 CVEs
- Etrust Directory - 0 CVEs
- Etrust Iam Suite - 0 CVEs
- Etrust Security Suite - 0 CVEs
- Etrust Siteminder Documentation - 0 CVEs
- Etrust Siteminder Policy Server - 0 CVEs
- Etrust Siteminder User Context Gateway - 0 CVEs
- Etrust Siteminder Web Access Manager Administrative Ui - 0 CVEs
- Hardmac Wi-fi Soc - 0 CVEs
- Identity Governance - 0 CVEs
- Identity Manager - 0 CVEs
- Identity Manager Virtual Appliance - 0 CVEs
- Introscope - 0 CVEs
- Introscope Agent For .net 3.0 - 0 CVEs
- Introscope Workstation - 0 CVEs
- Lsi Pci-sv92ex - 0 CVEs
- Mail Threat Defense - 0 CVEs
- Malware Analysis Appliance - 0 CVEs
- Malware Analyzer G2 - 0 CVEs
- Management Programs - 0 CVEs
- Messaging Gateway For Service Providers - 0 CVEs
- Netiron Cer Series Firmware - 0 CVEs
- Netiron Ces Series Firmware - 0 CVEs
- Netiron Mlx Series Firmware - 0 CVEs
- Netiron Os - 0 CVEs
- Netiron Xmr Series Firmware - 0 CVEs
- Netviz Professional - 0 CVEs
- Netviz Viewer - 0 CVEs
- Network Discovery Gateway - 0 CVEs
- Norton 360 - 0 CVEs
- Norton Core - 0 CVEs
- Norton Core Firmware - 0 CVEs
- Norton Ghost - 0 CVEs
- Norton Security - 0 CVEs
- Packetshaper S-series - 0 CVEs
- Rabbitmq Java Client - 0 CVEs
- Risk Authentication - 0 CVEs
- Service Desk Management - 0 CVEs
- Siteminder Federation - 0 CVEs
- Ssl Visibility Aapliance - 0 CVEs
- Strong Authentication - 0 CVEs
- Symantec Advanced Secure Gateway 500-10 - 0 CVEs
- Symantec Advanced Secure Gateway S200-30 - 0 CVEs
- Symantec Advanced Secure Gateway S200-40 - 0 CVEs
- Symantec Advanced Secure Gateway S400-20 - 0 CVEs
- Symantec Advanced Secure Gateway S400-30 - 0 CVEs
- Symantec Advanced Secure Gateway S400-40 - 0 CVEs
- Symantec Advanced Secure Gateway S500-10 - 0 CVEs
- Symantec Advanced Secure Gateway S500-20 - 0 CVEs
- Symantec Edge Secure Web Gateway - 0 CVEs
- System Recovery 2011 - 0 CVEs
- Systems Performance Liteagent - 0 CVEs
- Unicenter Application Server Managment - 0 CVEs
- Unicenter Browser Interface - 0 CVEs
- Unicenter Dsm Agent + Asset Management Plugin - 0 CVEs
- Unicenter Dsm Agent + Basic Inventory Plugin - 0 CVEs
- Unicenter Dsm Agent + Remote Control Plugin - 0 CVEs
- Unicenter Dsm Agent + Software Delivery Plugin - 0 CVEs
- Unicenter Enterprise Job Manager - 0 CVEs
- Unicenter Exchange Management Console - 0 CVEs
- Unicenter Management - 0 CVEs
- Unicenter Management Lotus Note Domino - 0 CVEs
- Unicenter Management Microsoft Exchange - 0 CVEs
- Unicenter Management Web Servers - 0 CVEs
- Unicenter Management Websphere Mq - 0 CVEs
- Unicenter Mq Management - 0 CVEs
- Unicenter Performance Management For Openvms - 0 CVEs
- Unicenter Tng Jpn - 0 CVEs
- Unified Infrastructure Management Snap - 0 CVEs
- Ush Host Components - 0 CVEs
- Vmware Nsx Advanced Load Balancer - 0 CVEs
- Web Gateway - 0 CVEs
- Web Security.cloud - 0 CVEs
- Workspace Streaming - 0 CVEs
- Workspace Virtualization - 0 CVEs
Newest CVEs of Broadcom
- CVE-2026-101034 - CVSS 6.8 (medium), 2026-10-27: An attacker who obtained the hardcoded key could decrypt domain/service account passwords, task run-as credentials, and sysprep passwords stored in or…
- CVE-2026-19810 - CVSS 5.4 (medium), 2026-10-13: Symantec Endpoint Detection and Response (SEDR) Console, prior to 4.13, may be susceptible to a Cross-Site Scripting (XSS) vulnerability, which is a type of…
- CVE-2026-87428 - CVSS 8.4 (high), 2026-10-08: In Brocade ASCG before 3.5.0, a local unauthorized user on the ASCG VM who can issue a request to the SANnav host network namespace can extract stored…
- CVE-2026-87426 - CVSS 5.3 (medium), 2026-10-08: An unauthenticated network-based attacker can query specific internal management endpoints on Brocade ASCG versions before 3.5.0 to enumerate the…
- CVE-2026-87425 - CVSS 7.6 (high), 2026-10-08: An unauthenticated remote attacker can modify the TLS client trust store in Brocade ASCG versions before 3.5.0. By supplying an unauthorized Certificate…
- CVE-2026-87424 - CVSS 8.8 (high), 2026-10-08: A vulnerability in the SupportLink API authentication component of Brocade ASCG versions prior to 3.5.0 allows an attacker to bypass authentication across…
- CVE-2026-85490 - CVSS 8.8 (high), 2026-10-08: When Brocade ASCG before 3.5.0 processes support bundle archives ingested from remote compromised endpoints, the application fails to sanitize path traversal…
- CVE-2026-85489 - CVSS 8.8 (high), 2026-10-08: An authentication flaw exists in the Brocade ASCG administrative management service component. An unauthenticated network user can issue direct API requests…
- CVE-2026-85488 - CVSS 7.8 (high), 2026-10-08: Brocade ASCG before 3.5.0 has a well-known Brocade default password embedded in a script distributed to every customer. Any local authenticated user with read…
- CVE-2026-85487 - CVSS 8.8 (high), 2026-10-08: A path traversal vulnerability exists in the HTTP service component of Brocade ASCG versions before 3.5.0. An unauthenticated attacker on the local network…
- CVE-2026-85486 - CVSS 8.6 (high), 2026-10-08: Brocade ASCG before 3.5.0 improperly processes user input by evaluating form data prior to validation. When an authenticated user submits a configuration…
- CVE-2026-85423 - CVSS 8.8 (high), 2026-10-08: A vulnerability has been identified in the data collection service of Brocade ASCG versions before 3.5.0. An API endpoint within the data collector service…
- CVE-2026-85422 - CVSS 8.4 (high), 2026-10-08: A vulnerability in Brocade ASCG version before 3.5.0 could allow an attacker to obtain a static cryptographic key hardcoded into the software binaries to…
- CVE-2026-85421 - CVSS 8.8 (high), 2026-10-08: A critical security vulnerability has been identified in Brocade ASCG versions before 3.5.0. The HTTPS service fails to properly enforce authentication or…
- CVE-2026-5769 - CVSS 5.6 (medium), 2026-10-08: A vulnerability in Brocade SANnav before 3.0.1 can have the Brocade Fabric OS switch admin password captured in plaintext within a memory swap file on the…
- CVE-2026-5049 - CVSS 6.9 (medium), 2026-10-08: A path traversal vulnerability affects the The Zone Alias Import flow feature in Brocade SANnav before 3.0.0a. A local authenticated attacker can write an…
- CVE-2026-5048 - CVSS 8 (high), 2026-10-08: In Brocade SANnav before 3.0.0a, an SQL Injection vulnerability in various external API inventories have a vulnerability that allows an authenticated attacker…
- CVE-2026-5047 - CVSS 8.2 (high), 2026-10-08: A vulnerability in Brocade SANnav before 2.4.0b and 3.0.0 prints encoded passwords and authentication tokens in log files. The vulnerability could allow an…
- CVE-2023-5649 - CVSS 6.8 (medium), 2026-10-08: An Improper Input Validation vulnerability for the registered case credentials in Brocade ASCG before v3.0 could allow a local authenticated user to provide…
- CVE-2023-5648 - CVSS 6.5 (medium), 2026-10-08: In Brocade ASCG before Brocade ASCG v3.0, several security-related HTTP Headers were missing in various Brocade ASCG URL paths, aiding unauthenticated…
- CVE-2026-94585 - CVSS 8.8 (high), 2026-10-08: An authentication bypass vulnerability exists in the web management interface of Brocade Fabric OS versions before 9.2.2d running on the MXG610 platform. An…
- CVE-2026-94587 - CVSS 6.9 (medium), 2026-10-08: A buffer overflow vulnerability exists in the WebTools administrative interface handling configuration download or file transfer operations of Brocade Fabric…
- CVE-2026-94579 - CVSS 8 (high), 2026-10-08: An OS command injection vulnerability exists in the PAM (Pluggable Authentication Module) session cleanup routines during SSH session termination on Brocade…
- CVE-2026-94576 - CVSS 8 (high), 2026-10-08: An authentication logic and privilege escalation vulnerability exists in the account management interface of Brocade Fabric OS versions before 9.2.2d and…
- CVE-2026-87661 - CVSS 6.8 (medium), 2026-10-08: Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 directly accepts Apache configuration file data during service setup or…
- CVE-2026-87677 - CVSS 6.6 (medium), 2026-10-08: An OS command injection vulnerability exists in the account management subsystem of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. When…
- CVE-2026-94586 - CVSS 8.5 (high), 2026-10-08: A command injection vulnerability exists in the WebTools administrative interface handling configuration download or file transfer operations of Brocade…
- CVE-2026-94581 - CVSS 8.5 (high), 2026-10-08: An OS command injection vulnerability exists in the REST API management interface of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1…
- CVE-2026-94577 - CVSS 7.8 (high), 2026-10-08: A privilege escalation vulnerability exists in the internal Command-Line Interface (CLI) authorization handling mechanism of Brocade Fabric OS versions before…
- CVE-2026-87664 - CVSS 8.5 (high), 2026-10-08: A session context forgery vulnerability exists in the web management daemon of Brocade Fabric OS versions 9.2.2d and 10.0.0 through 10.0.0a1. When processing…