brocade

Latest CVEs · RSS

• CVE-2026-87428 2026-10-08 · CVSS 8.4
  In Brocade ASCG before 3.5.0, a  local unauthorized user on the ASCG VM who can issue a request to the SANnav host network namespace can extract stored manageme
• CVE-2026-87426 2026-10-08 · CVSS 5.3
  An unauthenticated network-based attacker can query specific internal management endpoints on Brocade ASCG versions before 3.5.0 to enumerate the configuration
• CVE-2026-87425 2026-10-08 · CVSS 7.6
  An unauthenticated remote attacker can modify the TLS client trust store in Brocade ASCG versions before 3.5.0. By supplying an unauthorized Certificate Authori
• CVE-2026-87424 2026-10-08 · CVSS 8.6
  A vulnerability in the SupportLink API authentication component of Brocade ASCG versions prior to 3.5.0 allows an attacker to bypass authentication across deplo
• CVE-2026-85490 2026-10-08 · CVSS 7.7
  When Brocade ASCG before 3.5.0 processes support bundle archives ingested from remote compromised endpoints, the application fails to sanitize path traversal se
• CVE-2026-85489 2026-10-08 · CVSS 8.7
  An authentication flaw exists in the Brocade ASCG administrative management service component. An unauthenticated network user can issue direct API requests to
• CVE-2026-85488 2026-10-08 · CVSS 7.0
  Brocade ASCG before 3.5.0 has a well-known Brocade default password embedded in a script distributed to every customer. Any local authenticated user with read a
• CVE-2026-85487 2026-10-08 · CVSS 8.6
  A path traversal vulnerability exists in the HTTP service component of Brocade ASCG versions before 3.5.0. An unauthenticated attacker on the local network coul
• CVE-2026-85486 2026-10-08 · CVSS 8.6
  Brocade ASCG before 3.5.0 improperly processes user input by evaluating form data prior to validation. When an authenticated user submits a configuration form,
• CVE-2026-85423 2026-10-08 · CVSS 8.6
  A vulnerability has been identified in the data collection service of Brocade ASCG versions before 3.5.0. An API endpoint within the data collector service fail
• CVE-2026-85422 2026-10-08 · CVSS 8.4
  A vulnerability in Brocade ASCG version before 3.5.0 could allow an attacker to obtain a static cryptographic key hardcoded into the software binaries to secure
• CVE-2026-85421 2026-10-08 · CVSS 8.7
  A critical security vulnerability has been identified in Brocade ASCG versions before 3.5.0. The HTTPS service fails to properly enforce authentication or acces
• CVE-2026-5769 2026-10-08 · CVSS 5.6
  A vulnerability in Brocade SANnav before 3.0.1 can have the Brocade Fabric OS switch admin password captured in plaintext within a memory swap file on the serve
• CVE-2026-5049 2026-10-08 · CVSS 6.9
  A path traversal vulnerability affects the The Zone Alias Import flow feature in Brocade SANnav before 3.0.0a. A local authenticated attacker can write an uploa
• CVE-2026-5048 2026-10-08 · CVSS 6.1
  In Brocade SANnav before 3.0.0a, an SQL Injection vulnerability in various external API inventories have a vulnerability that allows an authenticated attacker t
• CVE-2026-5047 2026-10-08 · CVSS 8.2
  A vulnerability in Brocade SANnav before 2.4.0b and 3.0.0 prints encoded passwords and  authentication tokens in log files. The vulnerability could allow an aut
• CVE-2023-5649 2026-10-08 · CVSS 6.8
  An Improper Input Validation vulnerability for the registered case credentials in Brocade ASCG before v3.0 could allow a local authenticated user to provide inv
• CVE-2023-5648 2026-10-08 · CVSS 6.5
  In Brocade ASCG before Brocade ASCG v3.0, several security-related HTTP Headers were missing in various Brocade ASCG URL paths, aiding unauthenticated attackers
• CVE-2026-94585 2026-10-08 · CVSS 7.7
  An authentication bypass vulnerability exists in the web management interface of Brocade Fabric OS versions before 9.2.2d running on the MXG610 platform. An una
• CVE-2026-94587 2026-10-08 · CVSS 6.9
  A buffer overflow vulnerability exists in the WebTools administrative interface handling configuration download or file transfer operations of Brocade Fabric OS
• CVE-2026-94579 2026-10-08 · CVSS 5.4
  An OS command injection vulnerability exists in the PAM (Pluggable Authentication Module) session cleanup routines during SSH session termination on Brocade Fab
• CVE-2026-94576 2026-10-08 · CVSS 5.9
  An authentication logic and privilege escalation vulnerability exists in the account management interface of Brocade Fabric OS versions before 9.2.2d and 10.0.0
• CVE-2026-87661 2026-10-08 · CVSS 6.8
  Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 directly accepts Apache configuration file data during service setup or re-initialization.
• CVE-2026-87677 2026-10-08 · CVSS 5.4
  An OS command injection vulnerability exists in the account management subsystem of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. When a
• CVE-2026-94586 2026-10-08 · CVSS 8.5
  A command injection vulnerability exists in the WebTools administrative interface handling configuration download or file transfer operations of Brocade Fabric