Brocade vulnerabilities
151 CVEs and advisories name Brocade as an affected vendor, 1 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-87679When Brocade Fabric OS versions before 10.0.1 processes trunk configuration operations, the application parses user-supplied list strings in
- CVE-2026-85417Incomplete property masking in the SANnav logging subsystem
- CVE-2026-14441Logic flaw in SANnav Java cache key handling object comparison handling
- CVE-2026-14442Information exposure vulnerability in the job scheduling component of SANnav before 3.0.1a
- CVE-2026-14443Incomplete log sanitization during bulk IPsec policy collection in Brocade SANnav before 3.0.1a
- CVE-2026-82372Improper handling of sensitive data during IPsec policy creation and modification in Brocade SANnav before 3.0.1.a
- CVE-2026-82371Plaintext exposure of sensitive authentication data in SANnav discovery service log files
- CVE-2026-82370Unauthenticated remote command injection in the Brocade SANnav orchestrator HTTP service
- CVE-2026-82369Insufficient input sanitization of shell metacharacters in Brocade SANnav before 3.0.1a
- CVE-2026-82368Insecure access controls on internal service ports in Brocade SANnav versions before 3.0.1a allow local, non-administrative host users to co
- CVE-2026-0869Application User custom defined accounts are not properly password protected in Brocade ASCG 3.4.0
- CVE-2025-58381Directory transversal vulnerability in Brocade Fabric OS before 9.2.1c2 and 9.2.2 through 9.2.2a using various shell commands
- CVE-2025-9711Privilege escalation in Brocade Fabric OS before 9.2.1c3, and 9.2.2 though 9.2.2b
- CVE-2025-58380Directory transversal vulnerability in Brocade Fabric OS before 9.2.1 using grep command
- CVE-2026-0383Information disclosure in Brocade Fabric OS before 9.2.1c2, 9.2.2 through 9.2.2a and 10.0.0
- CVE-2025-58379Password Exposure in Brocade Fabric OS
- CVE-2025-58383Privilege escalation via bind command in Brocade Fabric OS
- CVE-2025-58382Privilege escalation in Brocade Fabric before 9.2.1c2 and 9.2.2 through 9.2.2a
- CVE-2025-12774SQL queries with sensitive information printed in logs with Brocade SANnav before 3.0
- CVE-2025-12773Plain password is generated in the audit logs while executing update-reports-purge-settings.sh script with Brocade SANnav before 2.4.0a
- CVE-2025-12772Plaintext Switch admin login password is seen in Brocade SANnav support save
- CVE-2025-12679Plain text pbe key visible in audit log during Brocade SANnav migration from 2.4.0a to 3.0.0
- CVE-2025-12680Brocade SANnav DataBase plaintext password is logged in failover logs (CVE-2025-12680)
- CVE-2025-4661Path transversal vulnerability potentially leading to sensitive information disclosure
- CVE-2025-1976Code injection exposure in Fabric OS 9.1.0 through 9.1.1d6
- CVE-2024-1509Brocade ASCG 3.2.0 web interface does not enforce HSTS, as defined by RFC 6797 for ports 8030 and 8100
- CVE-2024-5461Command or parameter injection via unique embedded switch SNMP commands.
- CVE-2024-5462Brocade Fabric OS may capture SNMP Passwords in clear text
- CVE-2024-4282Weak TLS Ciphers on Brocade SANnav OVA SSH port 22
- CVE-2024-10405Weak TLS Ciphers on Brocade SANnav port 443 & 18082