Brocade - vulnerabilities (CVEs)

172 CVEs in 62 products, 61 in the last 30 days, newest from 2026-10-08.

Products

Fabric Os - 71 CVEs
Brocade Sannav - 34 CVEs
Sannav - 21 CVEs
Brocade Active Support Connectivity Gateway - 13 CVEs
Brocade Fabric Os - 8 CVEs
Network Advisor - 7 CVEs
Vyatta 5400 Vrouter - 3 CVEs
Vyatta 5400 Vrouter Software - 3 CVEs
Ascg - 2 CVEs
Active Support Connectivity Gateway - 1 CVEs
Adx - 1 CVEs
Bigiron Rx - 1 CVEs
Bigiron Rx Switch - 1 CVEs
Brocade Switches - 1 CVEs
Fastiron - 1 CVEs
Icx - 1 CVEs
Mlx - 1 CVEs
Netiron Cer - 1 CVEs
Netiron Cer Series Firmware - 1 CVEs
Netiron Ces - 1 CVEs
Netiron Ces Series Firmware - 1 CVEs
Netiron Mlx Series Firmware - 1 CVEs
Netiron Os - 1 CVEs
Netiron Xmr - 1 CVEs
Netiron Xmr Series Firmware - 1 CVEs
Silkworm - 1 CVEs
Silkworm Fiber Channel Switch - 1 CVEs
Turboiron - 1 CVEs
Vdx - 1 CVEs
Virtual Traffic Manager - 1 CVEs
Vyatta - 1 CVEs
Vyatta Vrouter - 1 CVEs
Vyatta Vrouter Software - 1 CVEs
Data Center Fabric Manager - 0 CVEs
Ezswitchsetup - 0 CVEs
Fabric Operating System - 0 CVEs
Netiron Cer 2024c-4x-rt - 0 CVEs
Netiron Cer 2024f-4x-rt - 0 CVEs
Netiron Cer 2024f-rt - 0 CVEs
Netiron Cer 2048fx-rt - 0 CVEs
Netiron Ces 2024c-4x - 0 CVEs
Netiron Ces 2024f-4x - 0 CVEs
Netiron Ces 2048fx - 0 CVEs
Netiron Mlxe-16 - 0 CVEs
Netiron Mlxe-32 - 0 CVEs
Netiron Mlxe-4 - 0 CVEs
Netiron Mlxe-8 - 0 CVEs
Netiron Xmr 16000 - 0 CVEs
Netiron Xmr 32000 - 0 CVEs
Netiron Xmr 4000 - 0 CVEs
Netiron Xmr 8000 - 0 CVEs
San Health Diagnostics Capture - 0 CVEs
San Health Professional - 0 CVEs
Silkworm 12000 Director - 0 CVEs
Silkworm 200e Switch - 0 CVEs
Silkworm 24000 Director - 0 CVEs
Silkworm 3250 Fabric Switch - 0 CVEs
Silkworm 3850 Fabric Switch - 0 CVEs
Silkworm 3900 Switch - 0 CVEs
Silkworm 48000 Director - 0 CVEs
Silkworm 4900 Fibre Channel Switch - 0 CVEs
Smi Agent - 0 CVEs

Newest CVEs of Brocade

CVE-2026-87428 - CVSS 8.4 (high), 2026-10-08: In Brocade ASCG before 3.5.0, a local unauthorized user on the ASCG VM who can issue a request to the SANnav host network namespace can extract stored…
CVE-2026-87426 - CVSS 5.3 (medium), 2026-10-08: An unauthenticated network-based attacker can query specific internal management endpoints on Brocade ASCG versions before 3.5.0 to enumerate the…
CVE-2026-87425 - CVSS 7.6 (high), 2026-10-08: An unauthenticated remote attacker can modify the TLS client trust store in Brocade ASCG versions before 3.5.0. By supplying an unauthorized Certificate…
CVE-2026-87424 - CVSS 8.8 (high), 2026-10-08: A vulnerability in the SupportLink API authentication component of Brocade ASCG versions prior to 3.5.0 allows an attacker to bypass authentication across…
CVE-2026-85490 - CVSS 8.8 (high), 2026-10-08: When Brocade ASCG before 3.5.0 processes support bundle archives ingested from remote compromised endpoints, the application fails to sanitize path traversal…
CVE-2026-85489 - CVSS 8.8 (high), 2026-10-08: An authentication flaw exists in the Brocade ASCG administrative management service component. An unauthenticated network user can issue direct API requests…
CVE-2026-85488 - CVSS 7.8 (high), 2026-10-08: Brocade ASCG before 3.5.0 has a well-known Brocade default password embedded in a script distributed to every customer. Any local authenticated user with read…
CVE-2026-85487 - CVSS 8.8 (high), 2026-10-08: A path traversal vulnerability exists in the HTTP service component of Brocade ASCG versions before 3.5.0. An unauthenticated attacker on the local network…
CVE-2026-85486 - CVSS 8.6 (high), 2026-10-08: Brocade ASCG before 3.5.0 improperly processes user input by evaluating form data prior to validation. When an authenticated user submits a configuration…
CVE-2026-85423 - CVSS 8.8 (high), 2026-10-08: A vulnerability has been identified in the data collection service of Brocade ASCG versions before 3.5.0. An API endpoint within the data collector service…
CVE-2026-85422 - CVSS 8.4 (high), 2026-10-08: A vulnerability in Brocade ASCG version before 3.5.0 could allow an attacker to obtain a static cryptographic key hardcoded into the software binaries to…
CVE-2026-85421 - CVSS 8.8 (high), 2026-10-08: A critical security vulnerability has been identified in Brocade ASCG versions before 3.5.0. The HTTPS service fails to properly enforce authentication or…
CVE-2026-5769 - CVSS 5.6 (medium), 2026-10-08: A vulnerability in Brocade SANnav before 3.0.1 can have the Brocade Fabric OS switch admin password captured in plaintext within a memory swap file on the…
CVE-2026-5049 - CVSS 6.9 (medium), 2026-10-08: A path traversal vulnerability affects the The Zone Alias Import flow feature in Brocade SANnav before 3.0.0a. A local authenticated attacker can write an…
CVE-2026-5048 - CVSS 8 (high), 2026-10-08: In Brocade SANnav before 3.0.0a, an SQL Injection vulnerability in various external API inventories have a vulnerability that allows an authenticated attacker…
CVE-2026-5047 - CVSS 8.2 (high), 2026-10-08: A vulnerability in Brocade SANnav before 2.4.0b and 3.0.0 prints encoded passwords and authentication tokens in log files. The vulnerability could allow an…
CVE-2023-5649 - CVSS 6.8 (medium), 2026-10-08: An Improper Input Validation vulnerability for the registered case credentials in Brocade ASCG before v3.0 could allow a local authenticated user to provide…
CVE-2023-5648 - CVSS 6.5 (medium), 2026-10-08: In Brocade ASCG before Brocade ASCG v3.0, several security-related HTTP Headers were missing in various Brocade ASCG URL paths, aiding unauthenticated…
CVE-2026-94585 - CVSS 8.8 (high), 2026-10-08: An authentication bypass vulnerability exists in the web management interface of Brocade Fabric OS versions before 9.2.2d running on the MXG610 platform. An…
CVE-2026-94587 - CVSS 6.9 (medium), 2026-10-08: A buffer overflow vulnerability exists in the WebTools administrative interface handling configuration download or file transfer operations of Brocade Fabric…
CVE-2026-94579 - CVSS 8 (high), 2026-10-08: An OS command injection vulnerability exists in the PAM (Pluggable Authentication Module) session cleanup routines during SSH session termination on Brocade…
CVE-2026-94576 - CVSS 8 (high), 2026-10-08: An authentication logic and privilege escalation vulnerability exists in the account management interface of Brocade Fabric OS versions before 9.2.2d and…
CVE-2026-87661 - CVSS 6.8 (medium), 2026-10-08: Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 directly accepts Apache configuration file data during service setup or…
CVE-2026-87677 - CVSS 6.6 (medium), 2026-10-08: An OS command injection vulnerability exists in the account management subsystem of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. When…
CVE-2026-94586 - CVSS 8.5 (high), 2026-10-08: A command injection vulnerability exists in the WebTools administrative interface handling configuration download or file transfer operations of Brocade…
CVE-2026-94581 - CVSS 8.5 (high), 2026-10-08: An OS command injection vulnerability exists in the REST API management interface of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1…
CVE-2026-94577 - CVSS 7.8 (high), 2026-10-08: A privilege escalation vulnerability exists in the internal Command-Line Interface (CLI) authorization handling mechanism of Brocade Fabric OS versions before…
CVE-2026-87664 - CVSS 8.5 (high), 2026-10-08: A session context forgery vulnerability exists in the web management daemon of Brocade Fabric OS versions 9.2.2d and 10.0.0 through 10.0.0a1. When processing…
CVE-2026-87663 - CVSS 7.1 (high), 2026-10-08: An authentication bypass and command injection vulnerability exists in the inter-switch remote execution service of Brocade Fabric OS versions before 9.2.2d…
CVE-2026-87662 - CVSS 7 (high), 2026-10-08: Brocade Fabric versions before 9.2.2d and 10.0.0 through 10.0.0a1 handling of specific download protocols utilizes unsanitized parameter strings. When…