Brocade vulnerabilities
151 CVEs and advisories name Brocade as an affected vendor, 1 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-87428In Brocade ASCG before 3.5.0, a local unauthorized user on the ASCG VM who can issue a request to the SANnav host network namespace can ext
- CVE-2026-87426An unauthenticated network-based attacker can query specific internal management endpoints on Brocade ASCG versions before 3.5.0 to enumerat
- CVE-2026-87425An unauthenticated remote attacker can modify the TLS client trust store in Brocade ASCG versions before 3.5.0.
- CVE-2026-87424A vulnerability in the SupportLink API authentication component of Brocade ASCG versions prior to 3.5.0 allows an attacker to bypass authent
- CVE-2026-85490When Brocade ASCG before 3.5.0 processes support bundle archives ingested from remote compromised endpoints, the application fails to saniti
- CVE-2026-85489An authentication flaw exists in the Brocade ASCG administrative management service component.
- CVE-2026-85488Brocade ASCG before 3.5.0 has a well-known Brocade default password embedded in a script distributed to every customer.
- CVE-2026-85487A path traversal vulnerability exists in the HTTP service component of Brocade ASCG versions before 3.5.0.
- CVE-2026-85486Brocade ASCG before 3.5.0 improperly processes user input by evaluating form data prior to validation.
- CVE-2026-85423A vulnerability has been identified in the data collection service of Brocade ASCG versions before 3.5.0.
- CVE-2026-85422A vulnerability in Brocade ASCG version before 3.5.0 could allow an attacker to obtain a static cryptographic key hardcoded into the softwar
- CVE-2026-85421A critical security vulnerability has been identified in Brocade ASCG versions before 3.5.0.
- CVE-2026-5769A vulnerability in Brocade SANnav before 3.0.1 can have the Brocade Fabric OS switch admin password captured in plaintext within a memory sw
- CVE-2026-5049A path traversal vulnerability affects the The Zone Alias Import flow feature in Brocade SANnav before 3.0.0a.
- CVE-2026-5048In Brocade SANnav before 3.0.0a, an SQL Injection vulnerability in various external API inventories have a vulnerability that allows an auth
- CVE-2026-5047A vulnerability in Brocade SANnav before 2.4.0b and 3.0.0 prints encoded passwords and authentication tokens in log files.
- CVE-2023-5649An Improper Input Validation vulnerability for the registered case credentials in Brocade ASCG before v3.0 could allow a local authenticated
- CVE-2023-5648In Brocade ASCG before Brocade ASCG v3.0, several security-related HTTP Headers were missing in various Brocade ASCG URL paths, aiding unaut
- CVE-2026-94585An authentication bypass vulnerability exists in the web management interface of Brocade Fabric OS versions before 9.2.2d running on the MXG
- CVE-2026-94587A buffer overflow vulnerability exists in the WebTools administrative interface handling configuration download or file transfer operations
- CVE-2026-94579An OS command injection vulnerability exists in the PAM (Pluggable Authentication Module) session cleanup routines during SSH session termin
- CVE-2026-94576An authentication logic and privilege escalation vulnerability exists in the account management interface of Brocade Fabric OS versions befo
- CVE-2026-87661Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 directly accepts Apache configuration file data during service setup or
- CVE-2026-87677An OS command injection vulnerability exists in the account management subsystem of Brocade Fabric OS versions before 9.2.2d and 10.0.0 thro
- CVE-2026-94586A command injection vulnerability exists in the WebTools administrative interface handling configuration download or file transfer operation
- CVE-2026-94581An OS command injection vulnerability exists in the REST API management interface of Brocade Fabric OS versions before 9.2.2d and 10.0.0 thr
- CVE-2026-94577A privilege escalation vulnerability exists in the internal Command-Line Interface (CLI) authorization handling mechanism of Brocade Fabric
- CVE-2026-87664A session context forgery vulnerability exists in the web management daemon of Brocade Fabric OS versions 9.2.2d and 10.0.0 through 10.0.0a1
- CVE-2026-87663An authentication bypass and command injection vulnerability exists in the inter-switch remote execution service of Brocade Fabric OS versio
- CVE-2026-87662Brocade Fabric versions before 9.2.2d and 10.0.0 through 10.0.0a1 handling of specific download protocols utilizes unsanitized parameter str