Brocade
68 CVEsCVE IDSeverityProduct / summaryPublished
CVE-2026-5047
HIGH 8.2
Brocade Sannav — A vulnerability in Brocade SANnav before 2.4.0b and 3.0.0 prints encoded passwords and authentication tokens …
2026-10-08
CVE-2026-5048
MEDIUM 6.1
Brocade Sannav — In Brocade SANnav before 3.0.0a, an SQL Injection vulnerability in various external API inventories have a vul…
2026-10-08
CVE-2026-5049
MEDIUM 6.9
Brocade Sannav — A path traversal vulnerability affects the The Zone Alias Import flow feature in Brocade SANnav before 3.0.0a.…
2026-10-08
CVE-2026-5769
MEDIUM 5.6
Brocade Sannav — A vulnerability in Brocade SANnav before 3.0.1 can have the Brocade Fabric OS switch admin password captured i…
2026-10-08
CVE-2026-85421
HIGH 8.7
Brocade Active Support Connectivity Gateway — A critical security vulnerability has been identified in Brocade ASCG versions before 3.5.0. The HTTPS service…
2026-10-08
CVE-2026-85422
HIGH 8.4
Brocade Active Support Connectivity Gateway — A vulnerability in Brocade ASCG version before 3.5.0 could allow an attacker to obtain a static cryptographic …
2026-10-08
CVE-2026-85423
HIGH 8.6
Brocade Active Support Connectivity Gateway — A vulnerability has been identified in the data collection service of Brocade ASCG versions before 3.5.0. An A…
2026-10-08
CVE-2026-85486
HIGH 8.6
Brocade Active Support Connectivity Gateway — Brocade ASCG before 3.5.0 improperly processes user input by evaluating form data prior to validation. When an…
2026-10-08
CVE-2026-85487
HIGH 8.6
Brocade Active Support Connectivity Gateway — A path traversal vulnerability exists in the HTTP service component of Brocade ASCG versions before 3.5.0. An …
2026-10-08
CVE-2026-85488
HIGH 7
Brocade Active Support Connectivity Gateway — Brocade ASCG before 3.5.0 has a well-known Brocade default password embedded in a script distributed to every …
2026-10-08
CVE-2026-85489
HIGH 8.7
Brocade Active Support Connectivity Gateway — An authentication flaw exists in the Brocade ASCG administrative management service component. An unauthentica…
2026-10-08
CVE-2026-85490
HIGH 7.7
Brocade Active Support Connectivity Gateway — When Brocade ASCG before 3.5.0 processes support bundle archives ingested from remote compromised endpoints, t…
2026-10-08
CVE-2026-87424
HIGH 8.6
Brocade Active Support Connectivity Gateway — A vulnerability in the SupportLink API authentication component of Brocade ASCG versions prior to 3.5.0 allows…
2026-10-08
CVE-2026-87425
HIGH 7.6
Brocade Active Support Connectivity Gateway — An unauthenticated remote attacker can modify the TLS client trust store in Brocade ASCG versions before 3.5.0…
2026-10-08
CVE-2026-87426
MEDIUM 5.3
Brocade Active Support Connectivity Gateway — An unauthenticated network-based attacker can query specific internal management endpoints on Brocade ASCG ver…
2026-10-08
CVE-2026-87428
HIGH 8.4
Brocade Active Support Connectivity Gateway — In Brocade ASCG before 3.5.0, a local unauthorized user on the ASCG VM who can issue a request to the SANnav …
2026-10-08
CVE-2026-87659
HIGH 7.1
Fabric Os — A critical authorization bypass vulnerability exists in the Management Server handling of Brocade Fabric OS ve…
2026-10-08
CVE-2026-87660
HIGH 7
Fabric Os — An improper file permission and missing authorization vulnerability exists in the diagnostic kernel module sub…
2026-10-08
CVE-2026-87661
MEDIUM 6.8
Fabric Os — Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 directly accepts Apache configuration fil…
2026-10-08
CVE-2026-87662
HIGH 7
Fabric Os — Brocade Fabric versions before 9.2.2d and 10.0.0 through 10.0.0a1 handling of specific download protocols util…
2026-10-08
CVE-2026-87663
HIGH 7.1
Fabric Os — An authentication bypass and command injection vulnerability exists in the inter-switch remote execution servi…
2026-10-08
CVE-2026-87664
HIGH 8.5
Fabric Os — A session context forgery vulnerability exists in the web management daemon of Brocade Fabric OS versions 9.2.…
2026-10-08
CVE-2026-87665
MEDIUM 6
Fabric Os — A stack-based buffer overflow vulnerability exists in the Internet Key Exchange (IKEv2) protocol handler on Br…
2026-10-08
CVE-2026-87666
HIGH 8.6
Fabric Os — An OS command injection vulnerability exists in the time and zone management subsystem of Brocade Fabric OS ve…
2026-10-08
CVE-2026-87667
HIGH 8.4
Fabric Os — An argument injection vulnerability exists in the configuration management command-line utility of Brocade Fab…
2026-10-08
CVE-2026-87668
MEDIUM 6.9
Fabric Os — A stack-based buffer overflow vulnerability exists in the diagnostic execution utility of Brocade Fabric OS ve…
2026-10-08
CVE-2026-87669
MEDIUM 5.1
Fabric Os — A missing authorization check in Brocade Fabric OS versions before 10.0.1 REST API interface of affected platf…
2026-10-08
CVE-2026-87670
MEDIUM 5.1
Fabric Os — An authorization logic vulnerability exists in the Brocade Fabric OS versions before 10.0.1 REST API gateway. …
2026-10-08
CVE-2026-87671
HIGH 7.1
Fabric Os — An out-of-bounds memory read vulnerability exists in the web management daemon of Brocade Fabric OS versions b…
2026-10-08
CVE-2026-87672
MEDIUM 6.8
Fabric Os — An information disclosure vulnerability exists in the SupportLink diagnostic collection utilities of Brocade F…
2026-10-08
CVE-2026-87673
HIGH 7
Fabric Os — An OS command injection vulnerability exists in maintenance command-line diagnostic utilities on Brocade Fabri…
2026-10-08
CVE-2026-87674
HIGH 8.5
Fabric Os — A local privilege escalation vulnerability exists in the system logging daemon of Brocade Fabric OS versions b…
2026-10-08
CVE-2026-87675
HIGH 7.3
Fabric Os — An OS command injection vulnerability exists in the configuration management subsystem of Brocade Fabric OS ve…
2026-10-08
CVE-2026-87676
MEDIUM 6.9
Fabric Os — A stack-based buffer overflow vulnerability exists in the security library component of Brocade Fabric OS vers…
2026-10-08
CVE-2026-87677
MEDIUM 5.4
Fabric Os — An OS command injection vulnerability exists in the account management subsystem of Brocade Fabric OS versions…
2026-10-08
CVE-2026-87678
MEDIUM 6.9
Fabric Os — An input validation and output encoding vulnerability exists in the web management interface of Brocade Fabric…
2026-10-08
CVE-2026-87679
HIGH 8.5
Fabric Os — When Brocade Fabric OS versions before 10.0.1 processes trunk configuration operations, the application parses…
2026-10-08
CVE-2026-87680
HIGH 8.5
Fabric Os — A command injection vulnerability in the REST API management interface of Brocade Fabric OS versions before 10…
2026-10-08
CVE-2026-87681
HIGH 7.1
Fabric Os — An Access Control Bypass vulnerability exists in the Role-Based Access Control (RBAC) validation engine of Bro…
2026-10-08
CVE-2026-87682
HIGH 8.6
Fabric Os — Multiple OS Command Injection vulnerabilities exist in the management interface and session processing routine…
2026-10-08
CVE-2026-87683
HIGH 8.6
Fabric Os — Multiple stack-based buffer overflow vulnerabilities exist in the REST API management component of Brocade Fab…
2026-10-08
CVE-2026-87684
HIGH 8.7
Fabric Os — A stack-based buffer overflow vulnerability exists in the SNMP daemon request handling of Brocade Fabric versi…
2026-10-08
CVE-2026-87685
HIGH 8.4
Fabric Os — An arbitrary file manipulation vulnerability exists in the WebTools management interface of Brocade Fabric OS …
2026-10-08
CVE-2026-87686
MEDIUM 5.3
Fabric Os — An authentication and access control bypass vulnerability exists in the web server management interface of Bro…
2026-10-08
CVE-2026-87687
HIGH 8.5
Fabric Os — An authorization and input validation vulnerability exists in Brocade Fabric OS versions before 9.2.2d and 10.…
2026-10-08
CVE-2026-87688
HIGH 8.5
Fabric Os — An input validation vulnerability exists in the security certificate management component of the Brocade Fabri…
2026-10-08
CVE-2026-94575
MEDIUM 6.9
Fabric Os — A logic vulnerability in Brocade Fabric OS versions before 10.0.1 web management framework allows an authentic…
2026-10-08
CVE-2026-94576
MEDIUM 5.9
Fabric Os — An authentication logic and privilege escalation vulnerability exists in the account management interface of B…
2026-10-08
CVE-2026-94577
HIGH 7.3
Fabric Os — A privilege escalation vulnerability exists in the internal Command-Line Interface (CLI) authorization handlin…
2026-10-08
CVE-2026-94578
HIGH 7.5
Fabric Os — Brocade Fabric OS versions before 10.0.1 contain an authorization logic vulnerability in the AAA (Authenticati…
2026-10-08
CVE-2026-94579
MEDIUM 5.4
Fabric Os — An OS command injection vulnerability exists in the PAM (Pluggable Authentication Module) session cleanup rout…
2026-10-08
CVE-2026-94580
MEDIUM 5.7
Fabric Os — An arbitrary file and directory deletion vulnerability exists in the REST API management interface handling US…
2026-10-08
CVE-2026-94581
HIGH 8.5
Fabric Os — An OS command injection vulnerability exists in the REST API management interface of Brocade Fabric OS version…
2026-10-08
CVE-2026-94582
MEDIUM 6.8
Fabric Os — A memory buffer overflow vulnerability exists in the internal diagnostic and route validation routines used by…
2026-10-08
CVE-2026-94583
LOW 2.1
Fabric Os — A race condition vulnerability exists in the request processing logic of the REST management interface on Broc…
2026-10-08
CVE-2026-94584
LOW 2.1
Fabric Os — A race condition and thread-safety vulnerability exists in the web management daemon of Brocade Fabric OS vers…
2026-10-08
CVE-2026-94585
HIGH 7.7
Fabric Os — An authentication bypass vulnerability exists in the web management interface of Brocade Fabric OS versions be…
2026-10-08
CVE-2026-94586
HIGH 8.5
Fabric Os — A command injection vulnerability exists in the WebTools administrative interface handling configuration downl…
2026-10-08
CVE-2026-94587
MEDIUM 6.9
Fabric Os — A buffer overflow vulnerability exists in the WebTools administrative interface handling configuration downloa…
2026-10-08
CVE-2026-85417
MEDIUM 6.4
Sannav — Incomplete property masking in the SANnav logging subsystem permits SNMP authentication and privacy passwords …
2026-09-25
CVE-2026-14441
MEDIUM 6.9
Sannav — A logic flaw in Java cache key handling object comparison handling could lead to improper identifier resolutio…
2026-09-24
CVE-2026-14442
MEDIUM 6.9
Sannav — An information exposure vulnerability in the job scheduling component of SANnav allows sensitive credentials t…
2026-09-24
CVE-2026-14443
HIGH 8.4
Sannav — Incomplete log sanitization during bulk IPsec policy collection in Brocade SANnav versions before 3.0.1a permi…
2026-09-24
CVE-2026-82371
HIGH 8.5
Sannav — Plaintext exposure of sensitive authentication data in Brocade SANnav discovery service log files enables indi…
2026-09-24
CVE-2026-82372
HIGH 8.5
Sannav — Improper handling of sensitive data during IPsec policy creation and modification in Brocade SANnav versions b…
2026-09-24
CVE-2026-82368
HIGH 8.7
Sannav — Insecure access controls on internal service ports in Brocade SANnav versions before 3.0.1a allow local, non-a…
2026-09-23
CVE-2026-82369
HIGH 8.6
Sannav — Insufficient input sanitization of shell metacharacters in the Brocade SANnav CLI scripting component permits …
2026-09-23
CVE-2026-82370
HIGH 8.6
Sannav — Unauthenticated remote command injection in the Brocade SANnav orchestrator HTTP service permits network-adjac…
2026-09-23