Brocade
- Total products in the ecosystem
- 8
- Total vulnerabilities (90 days)
- 70
en
A short verification protects source data and prevents automated AI requests.
Verifying...
As of 11/09/2026, Brocade recorded 70 security vulnerabilities in the last 90 days across 5 products, including 43 rated High or above and 0 known exploited vulnerabilities (KEV) that should be prioritized for immediate remediation.
Over the last 90 days, Fabric OS had the most security vulnerabilities in the Brocade ecosystem, with 43 vulnerabilities—approximately 61.43% of the provider's total vulnerabilities during this period.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-85487CVE-2026-85487CVE-2026-85486CVE-2026-85486CVE-2026-85423CVE-2026-85423CVE-2026-85422CVE-2026-85422CVE-2026-85421CVE-2026-85421| Vulnerability | Exploitation status | Fix | Affected product | Published | Severity |
|---|---|---|---|---|---|
CVE-2026-85487CVE-2026-85487 | Exploitation statusNot exploited | FixYes | Affected product |
| Published10/08/2026 |
| SeverityHigh |
CVE-2026-85486CVE-2026-85486 | Exploitation statusNot exploited | FixYes | Affected productBrocade Active Support Connectivity Gateway | Published10/08/2026 | SeverityHigh |
|---|
CVE-2026-85423CVE-2026-85423 | Exploitation statusNot exploited | FixYes | Affected productBrocade Active Support Connectivity Gateway | Published10/08/2026 | SeverityHigh |
|---|
CVE-2026-85422CVE-2026-85422 | Exploitation statusNot exploited | FixYes | Affected productBrocade Active Support Connectivity Gateway | Published10/08/2026 | SeverityHigh |
|---|
CVE-2026-85421CVE-2026-85421 | Exploitation statusNot exploited | FixYes | Affected productBrocade Active Support Connectivity Gateway | Published10/08/2026 | SeverityHigh |
|---|
CVE-2026-5769CVE-2026-5769 | Exploitation statusNot exploited | FixYes | Affected productBrocade SANnav | Published10/08/2026 | SeverityMedium |
|---|
CVE-2026-5049CVE-2026-5049 | Exploitation statusNot exploited | FixYes | Affected productBrocade SANnav | Published10/08/2026 | SeverityMedium |
|---|
CVE-2026-5048CVE-2026-5048 | Exploitation statusNot exploited | FixYes | Affected productBrocade SANnav | Published10/08/2026 | SeverityMedium |
|---|
CVE-2026-5047CVE-2026-5047 | Exploitation statusNot exploited | FixYes | Affected productBrocade SANnav | Published10/08/2026 | SeverityHigh |
|---|
CVE-2023-5649CVE-2023-5649 | Exploitation statusNot exploited | FixYes | Affected productBrocade Active Support Connectivity Gateway | Published10/08/2026 | SeverityMedium |
|---|
CVE-2023-5648CVE-2023-5648 | Exploitation statusNot exploited | FixYes | Affected productActive Support Connectivity Gateway | Published10/08/2026 | SeverityMedium |
|---|
CVE-2026-85417Incomplete property masking in the SANnav logging subsystem | Exploitation statusNot exploited | FixYes | Affected productSANnav | Published09/25/2026 | SeverityMedium |
|---|
CVE-2026-82372Brocade SANnav Logs IPsec Pre-Shared Keys, Exposing Tunnel Credentials | Exploitation statusNot exploited | FixYes | Affected productSANnav | Published09/24/2026 | SeverityHigh |
|---|
CVE-2026-82371Plaintext exposure of sensitive authentication data in SANnav discovery service log files | Exploitation statusNot exploited | FixYes | Affected productSANnav | Published09/24/2026 | SeverityHigh |
|---|
CVE-2026-14443Incomplete log sanitization during bulk IPsec policy collection in Brocade SANnav before 3.0.1a | Exploitation statusNot exploited | FixYes | Affected productSANnav | Published09/24/2026 | SeverityHigh |
|---|
CVE-2026-14442Information exposure vulnerability in the job scheduling component of SANnav before 3.0.1a | Exploitation statusNot exploited | FixYes | Affected productSANnav | Published09/24/2026 | SeverityMedium |
|---|
CVE-2026-14441Logic flaw in SANnav Java cache key handling object comparison handling | Exploitation statusNot exploited | FixYes | Affected productSANnav | Published09/24/2026 | SeverityMedium |
|---|
CVE-2026-82370Unauthenticated remote command injection in the Brocade SANnav orchestrator HTTP service | Exploitation statusNot exploited | FixYes | Affected productSANnav | Published09/23/2026 | SeverityHigh |
|---|
CVE-2026-82369Insufficient input sanitization of shell metacharacters in Brocade SANnav before 3.0.1a | Exploitation statusNot exploited | FixYes | Affected productSANnav | Published09/23/2026 | SeverityHigh |
|---|
CVE-2026-82368CVE-2026-82368 | Exploitation statusNot exploited | FixYes | Affected productSANnav | Published09/23/2026 | SeverityHigh |
|---|
CVE-2026-0869Application User custom defined accounts are not properly password protected in Brocade ASCG 3.4.0 | Exploitation statusNot exploited | FixNo | Affected productASCG | Published03/03/2026 | SeverityHigh |
|---|
CVE-2026-0383Information disclosure in Brocade Fabric OS before 9.2.1c2, 9.2.2 through 9.2.2a and 10.0.0 | Exploitation statusNot exploited | FixNo | Affected productFabric OS | Published02/03/2026 | SeverityHigh |
|---|
CVE-2025-9711Privilege escalation in Brocade Fabric OS before 9.2.1c3, and 9.2.2 though 9.2.2b | Exploitation statusNot exploited | FixNo | Affected productFabric OS | Published02/03/2026 | SeverityHigh |
|---|
CVE-2025-58383Privilege escalation via bind command in Brocade Fabric OS | Exploitation statusNot exploited | FixNo | Affected productFabric OS | Published02/03/2026 | SeverityHigh |
|---|
CVE-2025-58382Privilege escalation in Brocade Fabric before 9.2.1c2 and 9.2.2 through 9.2.2a | Exploitation statusNot exploited | FixNo | Affected productFabric OS | Published02/03/2026 | SeverityHigh |
|---|
CVE-2025-58381Directory transversal vulnerability in Brocade Fabric OS before 9.2.1c2 and 9.2.2 through 9.2.2a using various shell commands | Exploitation statusNot exploited | FixNo | Affected productFabric OS | Published02/03/2026 | SeverityMedium |
|---|
CVE-2025-58380Directory transversal vulnerability in Brocade Fabric OS before 9.2.1 using grep command | Exploitation statusNot exploited | FixNo | Affected productFabric OS | Published02/03/2026 | SeverityMedium |
|---|
CVE-2025-58379Password Exposure in Brocade Fabric OS | Exploitation statusNot exploited | FixNo | Affected productFabric OS | Published02/03/2026 | SeverityMedium |
|---|
CVE-2025-12774SQL queries with sensitive information printed in logs with Brocade SANnav before 3.0 | Exploitation statusNot exploited | FixNo | Affected productSANnav | Published02/03/2026 | SeverityMedium |
|---|
CVE-2025-12773Plain password is generated in the audit logs while executing update-reports-purge-settings.sh script with Brocade SANnav before 2.4.0a | Exploitation statusNot exploited | FixNo | Affected productSANnav | Published02/03/2026 | SeverityHigh |
|---|
CVE-2025-12772Plaintext Switch admin login password is seen in Brocade SANnav support save | Exploitation statusNot exploited | FixNo | Affected productSANnav | Published02/02/2026 | SeverityHigh |
|---|
CVE-2025-12680Brocade SANnav DataBase plaintext password is logged in failover logs (CVE-2025-12680) | Exploitation statusNot exploited | FixNo | Affected productSANnav | Published02/02/2026 | SeverityMedium |
|---|
CVE-2025-12679Plain text pbe key visible in audit log during Brocade SANnav migration from 2.4.0a to 3.0.0 | Exploitation statusNot exploited | FixNo | Affected productSANnav | Published02/02/2026 | SeverityHigh |
|---|
CVE-2025-4661Path transversal vulnerability potentially leading to sensitive information disclosure | Exploitation statusNot exploited | FixNo | Affected productFabric OS | Published06/19/2025 | SeverityMedium |
|---|
CVE-2025-1976Code injection exposure in Fabric OS 9.1.0 through 9.1.1d6 | Exploitation statusKEV | FixNo | Affected productFabric OS | Published04/24/2025 | SeverityHigh |
|---|
CVE-2024-1509Brocade ASCG 3.2.0 web interface does not enforce HSTS, as defined by RFC 6797 for ports 8030 and 8100 | Exploitation statusNot exploited | FixNo | Affected productASCG | Published02/28/2025 | SeverityHigh |
|---|
CVE-2024-5461Command or parameter injection via unique embedded switch SNMP commands. | Exploitation statusNot exploited | FixNo | Affected productBrocade Fabric OS | Published02/15/2025 | SeverityHigh |
|---|
CVE-2025-1053Brocade SANnav encryption key is logged in the debug logs | Exploitation statusNot exploited | FixNo | Affected productBrocade SANnav | Published02/14/2025 | SeverityHigh |
|---|
CVE-2024-5462Brocade Fabric OS may capture SNMP Passwords in clear text | Exploitation statusNot exploited | FixNo | Affected productBrocade Fabric OS | Published02/14/2025 | SeverityMedium |
|---|
CVE-2024-4282Weak TLS Ciphers on Brocade SANnav OVA SSH port 22 | Exploitation statusNot exploited | FixNo | Affected productBrocade SANnav | Published02/14/2025 | SeverityHigh |
|---|
CVE-2024-2240Docker implementation in Brocade SANnav is missing Audit Rules. | Exploitation statusNot exploited | FixNo | Affected productBrocade SANnav | Published02/14/2025 | SeverityHigh |
|---|
CVE-2024-10405Weak TLS Ciphers on Brocade SANnav port 443 & 18082 | Exploitation statusNot exploited | FixNo | Affected productBrocade SANnav | Published02/14/2025 | SeverityMedium |
|---|
CVE-2024-10404Clear text password seen in switch-asset-collectors-mw in Brocade SANnav supportsave | Exploitation statusNot exploited | FixNo | Affected productBrocade SANnav | Published02/14/2025 | SeverityMedium |
|---|
CVE-2024-7517Privileged escalation via crafted use of portcfg command | Exploitation statusNot exploited | FixNo | Affected productFabric OS | Published11/21/2024 | SeverityHigh |
|---|
CVE-2024-10403SFTP/FTP password could be captured in plain text in Supportsave generated from SANnav | Exploitation statusNot exploited | FixNo | Affected productFabric OS | Published11/21/2024 | SeverityMedium |
|---|
CVE-2022-43937Brocade SANnav Information Disclosure Vulnerability | Exploitation statusNot exploited | FixNo | Affected productSANnav | Published11/21/2024 | SeverityMedium |
|---|
CVE-2022-43936Brocade Fabric OS switch passwords when debugging is enabled | Exploitation statusNot exploited | FixNo | Affected productSANnav | Published11/21/2024 | SeverityMedium |
|---|
CVE-2022-43934Weak Key-exchange algorithms | Exploitation statusNot exploited | FixNo | Affected productSANnav | Published11/21/2024 | SeverityMedium |
|---|
CVE-2022-43933configuration secrets are logged in support-save | Exploitation statusNot exploited | FixNo | Affected productSANnav | Published11/21/2024 | SeverityMedium |
|---|
CVE-2024-7516Brocade Fabric OS before 9.2.2 does not enforce strict host key checking | Exploitation statusNot exploited | FixNo | Affected productFabric OS | Published11/12/2024 | SeverityHigh |
|---|
150 Results | Page 2 of 3