CVEs published by Brocade Communications Systems, LLC

CVEs published by Brocade Communications Systems, LLC (CVE Numbering Authority). 70 tracked.

• CVE-2026-94587 MEDIUM 4.5 UPGRADE A buffer overflow vulnerability exists in the WebTools administrative interface handling configuration downloa
• CVE-2026-94586 MEDIUM 6.8 UPGRADE A command injection vulnerability exists in the WebTools administrative interface handling configuration downl
• CVE-2026-94585 HIGH 8.8 UPGRADE An authentication bypass vulnerability exists in the web management interface of Brocade Fabric OS versions be
• CVE-2026-94581 MEDIUM 6.8 UPGRADE An OS command injection vulnerability exists in the REST API management interface of Brocade Fabric OS version
• CVE-2026-94579 HIGH 8.0 UPGRADE An OS command injection vulnerability exists in the PAM (Pluggable Authentication Module) session cleanup rout
• CVE-2026-94577 HIGH 7.8 UPGRADE A privilege escalation vulnerability exists in the internal Command-Line Interface (CLI) authorization handlin
• CVE-2026-94576 HIGH 8.0 UPGRADE An authentication logic and privilege escalation vulnerability exists in the account management interface of B
• CVE-2026-87677 MEDIUM 6.6 UPGRADE An OS command injection vulnerability exists in the account management subsystem of Brocade Fabric OS versions
• CVE-2026-87664 HIGH 7.8 UPGRADE A session context forgery vulnerability exists in the web management daemon of Brocade Fabric OS versions 9.2.
• CVE-2026-87663 MEDIUM 6.7 UPGRADE An authentication bypass and command injection vulnerability exists in the inter-switch remote execution servi
• CVE-2026-87662 MEDIUM 6.7 UPGRADE Brocade Fabric versions before 9.2.2d and 10.0.0 through 10.0.0a1 handling of specific download protocols util
• CVE-2026-87661 MEDIUM 5.7 UPGRADE Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 directly accepts Apache configuration fil
• CVE-2023-5649 MEDIUM 5.5 UPGRADE An Improper Input Validation vulnerability for the registered case credentials in Brocade ASCG before v3.0 cou
• CVE-2023-5648 MEDIUM 6.1 UPGRADE In Brocade ASCG before Brocade ASCG v3.0, several security-related HTTP Headers were missing in various Brocad
• CVE-2026-5049 MEDIUM 5.7 UPGRADE A path traversal vulnerability affects the The Zone Alias Import flow feature in Brocade SANnav before 3.0.0a
• CVE-2026-5048 HIGH 8.0 UPGRADE In Brocade SANnav before 3.0.0a, an SQL Injection vulnerability in various external API inventories have a vul
• CVE-2026-5047 MEDIUM 5.7 UPGRADE A vulnerability in Brocade SANnav before 2.4.0b and 3.0.0 prints encoded passwords and  authentication tokens
• CVE-2026-87688 MEDIUM 6.8 UPGRADE An input validation vulnerability exists in the security certificate management component of the Brocade Fabri
• CVE-2026-94580 MEDIUM 4.5 UPGRADE An arbitrary file and directory deletion vulnerability exists in the REST API management interface handling US
• CVE-2026-94584 LOW 2.6 UPGRADE A race condition and thread-safety vulnerability exists in the web management daemon of Brocade Fabric OS vers
• CVE-2026-87660 HIGH 7.1 UPGRADE An improper file permission and missing authorization vulnerability exists in the diagnostic kernel module sub
• CVE-2026-87666 HIGH 8.0 UPGRADE An OS command injection vulnerability exists in the time and zone management subsystem of Brocade Fabric OS ve
• CVE-2026-87667 MEDIUM 4.5 UPGRADE An argument injection vulnerability exists in the configuration management command-line utility of Brocade Fab
• CVE-2026-87673 HIGH 7.2 UPGRADE An OS command injection vulnerability exists in maintenance command-line diagnostic utilities on Brocade Fabri
• CVE-2026-87674 HIGH 7.8 UPGRADE A local privilege escalation vulnerability exists in the system logging daemon of Brocade Fabric OS versions b
• CVE-2026-87685 MEDIUM 6.8 UPGRADE An arbitrary file manipulation vulnerability exists in the WebTools management interface of Brocade Fabric OS
• CVE-2026-87687 HIGH 7.3 UPGRADE An authorization and input validation vulnerability exists in Brocade Fabric OS versions before 9.2.2d and 10.
• CVE-2026-87675 MEDIUM 6.8 UPGRADE An OS command injection vulnerability exists in the configuration management subsystem of Brocade Fabric OS ve
• CVE-2026-5769 MEDIUM 4.1 UPGRADE A vulnerability in Brocade SANnav before 3.0.1 can have the Brocade Fabric OS switch admin password captured i
• CVE-2026-87428 HIGH 7.8 UPGRADE In Brocade ASCG before 3.5.0, a  local unauthorized user on the ASCG VM who can issue a request to the SANnav
• CVE-2026-87426 MEDIUM 4.3 UPGRADE An unauthenticated network-based attacker can query specific internal management endpoints on Brocade ASCG ver
• CVE-2026-87425 MEDIUM 6.8 UPGRADE An unauthenticated remote attacker can modify the TLS client trust store in Brocade ASCG versions before 3.5.0
• CVE-2026-87424 HIGH 8.8 UPGRADE A vulnerability in the SupportLink API authentication component of Brocade ASCG versions prior to 3.5.0 allows
• CVE-2026-85490 HIGH 8.8 UPGRADE When Brocade ASCG before 3.5.0 processes support bundle archives ingested from remote compromised endpoints, t
• CVE-2026-85489 HIGH 8.8 UPGRADE An authentication flaw exists in the Brocade ASCG administrative management service component
• CVE-2026-85488 HIGH 7.8 UPGRADE Brocade ASCG before 3.5.0 has a well-known Brocade default password embedded in a script distributed to every
• CVE-2026-85487 HIGH 8.8 UPGRADE A path traversal vulnerability exists in the HTTP service component of Brocade ASCG versions before 3.5.0
• CVE-2026-85486 HIGH 8.0 UPGRADE Brocade ASCG before 3.5.0 improperly processes user input by evaluating form data prior to validation
• CVE-2026-85423 HIGH 8.8 UPGRADE A vulnerability has been identified in the data collection service of Brocade ASCG versions before 3.5.0
• CVE-2026-85422 HIGH 7.8 UPGRADE A vulnerability in Brocade ASCG version before 3.5.0 could allow an attacker to obtain a static cryptographic
• CVE-2026-85421 HIGH 8.8 UPGRADE A critical security vulnerability has been identified in Brocade ASCG versions before 3.5.0
• CVE-2026-87676 MEDIUM 5.7 UPGRADE A stack-based buffer overflow vulnerability exists in the security library component of Brocade Fabric OS vers
• CVE-2026-87678 MEDIUM 5.2 UPGRADE An input validation and output encoding vulnerability exists in the web management interface of Brocade Fabric
• CVE-2026-87684 CRITICAL 9.8 UPGRADE A stack-based buffer overflow vulnerability exists in the SNMP daemon request handling of Brocade Fabric versi
• CVE-2026-87686 MEDIUM 4.3 UPGRADE An authentication and access control bypass vulnerability exists in the web server management interface of Bro
• CVE-2026-94578 HIGH 8.8 UPGRADE Brocade Fabric OS versions before 10.0.1 contain an authorization logic vulnerability in the AAA (Authenticati
• CVE-2026-94575 MEDIUM 5.7 UPGRADE A logic vulnerability in Brocade Fabric OS versions before 10.0.1 web management framework allows an authentic
• CVE-2026-94582 HIGH 7.8 UPGRADE A memory buffer overflow vulnerability exists in the internal diagnostic and route validation routines used by
• CVE-2026-94583 LOW 2.6 UPGRADE A race condition vulnerability exists in the request processing logic of the REST management interface on Broc
• CVE-2026-87672 MEDIUM 5.5 UPGRADE An information disclosure vulnerability exists in the SupportLink diagnostic collection utilities of Brocade F
• CVE-2026-87682 HIGH 8.8 UPGRADE Multiple OS Command Injection vulnerabilities exist in the management interface and session processing routine
• CVE-2026-87683 HIGH 8.8 UPGRADE Multiple stack-based buffer overflow vulnerabilities exist in the REST API management component of Brocade Fab
• CVE-2026-87659 CRITICAL 9.8 UPGRADE A critical authorization bypass vulnerability exists in the Management Server handling of Brocade Fabric OS ve
• CVE-2026-87665 HIGH 7.5 UPGRADE A stack-based buffer overflow vulnerability exists in the Internet Key Exchange (IKEv2) protocol handler on Br
• CVE-2026-87668 MEDIUM 6.5 UPGRADE A stack-based buffer overflow vulnerability exists in the diagnostic execution utility of Brocade Fabric OS ve
• CVE-2026-87669 MEDIUM 4.3 UPGRADE A missing authorization check in Brocade Fabric OS versions before 10.0.1 REST API interface of affected platf
• CVE-2026-87670 MEDIUM 4.3 UPGRADE An authorization logic vulnerability exists in the Brocade Fabric OS versions before 10.0.1 REST API gateway
• CVE-2026-87671 HIGH 7.5 UPGRADE An out-of-bounds memory read vulnerability exists in the web management daemon of Brocade Fabric OS versions b
• CVE-2026-87679 HIGH 7.2 UPGRADE When Brocade Fabric OS versions before 10.0.1 processes trunk configuration operations, the application parses
• CVE-2026-87680 HIGH 8.8 UPGRADE A command injection vulnerability in the REST API management interface of Brocade Fabric OS versions before 10
• CVE-2026-87681 MEDIUM 6.3 UPGRADE An Access Control Bypass vulnerability exists in the Role-Based Access Control (RBAC) validation engine of Bro
• CVE-2026-82372 HIGH 8.5 Improper handling of sensitive data during IPsec policy creation and modification in Brocade SANnav versions b
• CVE-2026-82371 HIGH 8.5 Plaintext exposure of sensitive authentication data in Brocade SANnav discovery service log files enables indi
• CVE-2026-82370 HIGH 8.6 Unauthenticated remote command injection in the Brocade SANnav orchestrator HTTP service permits network-adjac
• CVE-2026-82369 HIGH 8.6 Insufficient input sanitization of shell metacharacters in the Brocade SANnav CLI scripting component permits
• CVE-2026-82368 HIGH 8.7 Insecure access controls on internal service ports in Brocade SANnav versions before 3.0.1a allow local, non-a
• CVE-2026-14443 HIGH 8.4 Incomplete log sanitization during bulk IPsec policy collection in Brocade SANnav versions before 3.0.1a permi
• CVE-2026-14442 MEDIUM 6.9 An information exposure vulnerability in the job scheduling component of SANnav allows sensitive credentials t
• CVE-2026-14441 MEDIUM 6.9 A logic flaw in Java cache key handling object comparison handling could lead to improper identifier resolutio
• CVE-2026-85417 MEDIUM 6.4 Incomplete property masking in the SANnav logging subsystem permits SNMP authentication and privacy passwords

← Back to latest CVEs