Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage

Every public CVE, as it is published

The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 3 min ago.

At a glance

Published CVEs; rejected ones are not counted.

  • 401,702All CVEsplus 19,141 rejected
  • 647Last 24 hours3,003 in the last 7 days
  • 17,172Last 30 days1,609 of them critical
  • 1,769Known exploitedin the CISA KEV catalog

CVEs published per year

All time, by publication date in UTC; follows the filter above.

  • Critical
  • High
  • Medium
  • Low
  • Not scored
The numbers of every bucket are in the table under the chart.
Show the numbers as a table
Matching CVEs per period and severity, newest first
PeriodCriticalHighMediumLowNot scoredTotalCumulative
2026051302083244
20250890017161
2024015201036144
202306120018108
202231011102590
2021196001665
2020556001649
201916200933
20181103001424
201727000910
20160100011

Latest CVEs

244 CVEs, newest first

CVEs, newest first
Title
CVE-2026-87428
In Brocade ASCG before 3.5.0, a local unauthorized user on the ASCG VM who can issue a request to the SANnav host network namespace can extract stored…Brocade · Brocade Active Support Connectivity Gateway
High8.4
CVE-2026-87426
An unauthenticated network-based attacker can query specific internal management endpoints on Brocade ASCG versions before 3.5.0 to enumerate the configuration…Brocade · Brocade Active Support Connectivity Gateway
Medium5.3
CVE-2026-87425
An unauthenticated remote attacker can modify the TLS client trust store in Brocade ASCG versions before 3.5.0. By supplying an unauthorized Certificate…Brocade · Brocade Active Support Connectivity Gateway
High7.6
CVE-2026-87424
A vulnerability in the SupportLink API authentication component of Brocade ASCG versions prior to 3.5.0 allows an attacker to bypass authentication across…Brocade · Brocade Active Support Connectivity Gateway
High8.6
CVE-2026-85490
When Brocade ASCG before 3.5.0 processes support bundle archives ingested from remote compromised endpoints, the application fails to sanitize path traversal…Brocade · Brocade Active Support Connectivity Gateway
High7.7
CVE-2026-85489
An authentication flaw exists in the Brocade ASCG administrative management service component. An unauthenticated network user can issue direct API requests to…Brocade · Brocade Active Support Connectivity Gateway
High8.7
CVE-2026-85488
Brocade ASCG before 3.5.0 has a well-known Brocade default password embedded in a script distributed to every customer. Any local authenticated user with read…Brocade · Brocade Active Support Connectivity Gateway
High7.0
CVE-2026-85487
A path traversal vulnerability exists in the HTTP service component of Brocade ASCG versions before 3.5.0. An unauthenticated attacker on the local network…Brocade · Brocade Active Support Connectivity Gateway
High8.6
CVE-2026-85486
Brocade ASCG before 3.5.0 improperly processes user input by evaluating form data prior to validation. When an authenticated user submits a configuration form,…Brocade · Brocade Active Support Connectivity Gateway
High8.6
CVE-2026-85423
A vulnerability has been identified in the data collection service of Brocade ASCG versions before 3.5.0. An API endpoint within the data collector service…Brocade · Brocade Active Support Connectivity Gateway
High8.6
CVE-2026-85422
A vulnerability in Brocade ASCG version before 3.5.0 could allow an attacker to obtain a static cryptographic key hardcoded into the software binaries to…Brocade · Brocade Active Support Connectivity Gateway
High8.4
CVE-2026-85421
A critical security vulnerability has been identified in Brocade ASCG versions before 3.5.0. The HTTPS service fails to properly enforce authentication or…Brocade · Brocade Active Support Connectivity Gateway
High8.7
CVE-2026-5769
A vulnerability in Brocade SANnav before 3.0.1 can have the Brocade Fabric OS switch admin password captured in plaintext within a memory swap file on the…Brocade · Brocade SANnav
Medium5.6
CVE-2026-5049
A path traversal vulnerability affects the The Zone Alias Import flow feature in Brocade SANnav before 3.0.0a. A local authenticated attacker can write an…Brocade · Brocade SANnav
Medium6.9
CVE-2026-5048
In Brocade SANnav before 3.0.0a, an SQL Injection vulnerability in various external API inventories have a vulnerability that allows an authenticated attacker…Brocade · Brocade SANnav
Medium6.1
CVE-2026-5047
A vulnerability in Brocade SANnav before 2.4.0b and 3.0.0 prints encoded passwords and authentication tokens in log files. The vulnerability could allow an…Brocade · Brocade SANnav
High8.2
CVE-2023-5649
An Improper Input Validation vulnerability for the registered case credentials in Brocade ASCG before v3.0 could allow a local authenticated user to provide…Brocade · Brocade Active Support Connectivity Gateway
Medium6.8
CVE-2023-5648
In Brocade ASCG before Brocade ASCG v3.0, several security-related HTTP Headers were missing in various Brocade ASCG URL paths, aiding unauthenticated…Brocade · Active Support Connectivity Gateway
Medium6.5
CVE-2026-94585
An authentication bypass vulnerability exists in the web management interface of Brocade Fabric OS versions before 9.2.2d running on the MXG610 platform. An…Brocade · Fabric OS
High7.7
CVE-2026-94587
A buffer overflow vulnerability exists in the WebTools administrative interface handling configuration download or file transfer operations of Brocade Fabric…Brocade · Fabric OS
Medium6.9
CVE-2026-94579
An OS command injection vulnerability exists in the PAM (Pluggable Authentication Module) session cleanup routines during SSH session termination on Brocade…Brocade · Fabric OS
Medium5.4
CVE-2026-94576
An authentication logic and privilege escalation vulnerability exists in the account management interface of Brocade Fabric OS versions before 9.2.2d and…Brocade · Fabric OS
Medium5.9
CVE-2026-87661
Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 directly accepts Apache configuration file data during service setup or re-initialization.…Brocade · Fabric OS
Medium6.8
CVE-2026-87677
An OS command injection vulnerability exists in the account management subsystem of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. When…Brocade · Fabric OS
Medium5.4
CVE-2026-94586
A command injection vulnerability exists in the WebTools administrative interface handling configuration download or file transfer operations of Brocade Fabric…Brocade · Fabric OS
High8.5
CVE-2026-94581
An OS command injection vulnerability exists in the REST API management interface of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1…Brocade · Fabric OS
High8.5
CVE-2026-94577
A privilege escalation vulnerability exists in the internal Command-Line Interface (CLI) authorization handling mechanism of Brocade Fabric OS versions before…Brocade · Fabric OS
High7.3
CVE-2026-87664
A session context forgery vulnerability exists in the web management daemon of Brocade Fabric OS versions 9.2.2d and 10.0.0 through 10.0.0a1. When processing…Brocade · Fabric OS
High8.5
CVE-2026-87663
An authentication bypass and command injection vulnerability exists in the inter-switch remote execution service of Brocade Fabric OS versions before 9.2.2d…Brocade · Fabric OS
High7.1
CVE-2026-87662
Brocade Fabric versions before 9.2.2d and 10.0.0 through 10.0.0a1 handling of specific download protocols utilizes unsanitized parameter strings. When…Brocade · Fabric OS
High7.0
CVE-2026-87660
An improper file permission and missing authorization vulnerability exists in the diagnostic kernel module subsystem of Brocade Fabric OS versions before…Brocade · Fabric OS
High7.0
CVE-2026-87667
An argument injection vulnerability exists in the configuration management command-line utility of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through…Brocade · Fabric OS
High8.4
CVE-2026-87666
An OS command injection vulnerability exists in the time and zone management subsystem of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1.…Brocade · Fabric OS
High8.6
CVE-2026-87675
An OS command injection vulnerability exists in the configuration management subsystem of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1.…Brocade · Fabric OS
High7.3
CVE-2026-87674
A local privilege escalation vulnerability exists in the system logging daemon of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1.…Brocade · Fabric OS
High8.5
CVE-2026-87673
An OS command injection vulnerability exists in maintenance command-line diagnostic utilities on Brocade Fabric OS versions before 9.2.2d and 10.0.0 through…Brocade · Fabric OS
High7.0
CVE-2026-87687
An authorization and input validation vulnerability exists in Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. An authenticated user with…Brocade · Fabric OS
High8.5
CVE-2026-87685
An arbitrary file manipulation vulnerability exists in the WebTools management interface of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through…Brocade · Fabric OS
High8.4
CVE-2026-87688
An input validation vulnerability exists in the security certificate management component of the Brocade Fabric OS administrative management API. When…Brocade · Fabric OS
High8.5
CVE-2026-94584
A race condition and thread-safety vulnerability exists in the web management daemon of Brocade Fabric OS versions before 10.0.1. When handling user…Brocade · Fabric OS
Low2.1
CVE-2026-94580
An arbitrary file and directory deletion vulnerability exists in the REST API management interface handling USB storage operations on Brocade Fabric OS…Brocade · Fabric OS
Medium5.7
CVE-2026-94575
A logic vulnerability in Brocade Fabric OS versions before 10.0.1 web management framework allows an authenticated, low-privileged user to bypass inner…Brocade · Fabric OS
Medium6.9
CVE-2026-94583
A race condition vulnerability exists in the request processing logic of the REST management interface on Brocade Fabric OS versions before 10.0.1. When…Brocade · Fabric OS
Low2.1
CVE-2026-94582
A memory buffer overflow vulnerability exists in the internal diagnostic and route validation routines used by the Fabric Shortest Path First (FSPF) protocol…Brocade · Fabric OS
Medium6.8
CVE-2026-87668
A stack-based buffer overflow vulnerability exists in the diagnostic execution utility of Brocade Fabric OS versions before 10.0.1. When processing command…Brocade · Fabric OS
Medium6.9
CVE-2026-87665
A stack-based buffer overflow vulnerability exists in the Internet Key Exchange (IKEv2) protocol handler on Brocade Fabric OS versions before 10.0.1. The…Brocade · Fabric OS
Medium6.0
CVE-2026-87672
An information disclosure vulnerability exists in the SupportLink diagnostic collection utilities of Brocade Fabric OS versions before 10.0.1. When SupportLink…Brocade · Fabric OS
Medium6.8
CVE-2026-87670
An authorization logic vulnerability exists in the Brocade Fabric OS versions before 10.0.1 REST API gateway. The internal gate guarding restricted management…Brocade · Fabric OS
Medium5.1
CVE-2026-87669
A missing authorization check in Brocade Fabric OS versions before 10.0.1 REST API interface of affected platform releases allows an authenticated user,…Brocade · Fabric OS
Medium5.1
CVE-2026-87678
An input validation and output encoding vulnerability exists in the web management interface of Brocade Fabric OS versions before 10.0.1. When configuring…Brocade · Fabric OS
Medium6.9