Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage

Every public CVE, as it is published

The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 4 min ago.

At a glance

Published CVEs; rejected ones are not counted.

  • 400,519All CVEsplus 18,890 rejected
  • 420Last 24 hours3,027 in the last 7 days
  • 17,429Last 30 days1,599 of them critical
  • 1,768Known exploitedin the CISA KEV catalog

CVEs published per year

All time, by publication date in UTC; follows the filter above.

  • Critical
  • High
  • Medium
  • Low
  • Not scored
The numbers of every bucket are in the table under the chart.
Show the numbers as a table
Matching CVEs per period and severity, newest first
PeriodCriticalHighMediumLowNot scoredTotalCumulative
2026051302083151
2025064001068
202401520103658
20230612001822
20220020024
20210000002
20200200022

Latest CVEs

151 CVEs, newest first

CVEs, newest first
Title
CVE-2026-87428
In Brocade ASCG before 3.5.0, a local unauthorized user on the ASCG VM who can issue a request to the SANnav host network namespace can extract stored…Brocade · Brocade Active Support Connectivity Gateway
High8.4
CVE-2026-87426
An unauthenticated network-based attacker can query specific internal management endpoints on Brocade ASCG versions before 3.5.0 to enumerate the configuration…Brocade · Brocade Active Support Connectivity Gateway
Medium5.3
CVE-2026-87425
An unauthenticated remote attacker can modify the TLS client trust store in Brocade ASCG versions before 3.5.0. By supplying an unauthorized Certificate…Brocade · Brocade Active Support Connectivity Gateway
High7.6
CVE-2026-87424
A vulnerability in the SupportLink API authentication component of Brocade ASCG versions prior to 3.5.0 allows an attacker to bypass authentication across…Brocade · Brocade Active Support Connectivity Gateway
High8.6
CVE-2026-85490
When Brocade ASCG before 3.5.0 processes support bundle archives ingested from remote compromised endpoints, the application fails to sanitize path traversal…Brocade · Brocade Active Support Connectivity Gateway
High7.7
CVE-2026-85489
An authentication flaw exists in the Brocade ASCG administrative management service component. An unauthenticated network user can issue direct API requests to…Brocade · Brocade Active Support Connectivity Gateway
High8.7
CVE-2026-85488
Brocade ASCG before 3.5.0 has a well-known Brocade default password embedded in a script distributed to every customer. Any local authenticated user with read…Brocade · Brocade Active Support Connectivity Gateway
High7.0
CVE-2026-85487
A path traversal vulnerability exists in the HTTP service component of Brocade ASCG versions before 3.5.0. An unauthenticated attacker on the local network…Brocade · Brocade Active Support Connectivity Gateway
High8.6
CVE-2026-85486
Brocade ASCG before 3.5.0 improperly processes user input by evaluating form data prior to validation. When an authenticated user submits a configuration form,…Brocade · Brocade Active Support Connectivity Gateway
High8.6
CVE-2026-85423
A vulnerability has been identified in the data collection service of Brocade ASCG versions before 3.5.0. An API endpoint within the data collector service…Brocade · Brocade Active Support Connectivity Gateway
High8.6
CVE-2026-85422
A vulnerability in Brocade ASCG version before 3.5.0 could allow an attacker to obtain a static cryptographic key hardcoded into the software binaries to…Brocade · Brocade Active Support Connectivity Gateway
High8.4
CVE-2026-85421
A critical security vulnerability has been identified in Brocade ASCG versions before 3.5.0. The HTTPS service fails to properly enforce authentication or…Brocade · Brocade Active Support Connectivity Gateway
High8.7
CVE-2026-5769
A vulnerability in Brocade SANnav before 3.0.1 can have the Brocade Fabric OS switch admin password captured in plaintext within a memory swap file on the…Brocade · Brocade SANnav
Medium5.6
CVE-2026-5049
A path traversal vulnerability affects the The Zone Alias Import flow feature in Brocade SANnav before 3.0.0a. A local authenticated attacker can write an…Brocade · Brocade SANnav
Medium6.9
CVE-2026-5048
In Brocade SANnav before 3.0.0a, an SQL Injection vulnerability in various external API inventories have a vulnerability that allows an authenticated attacker…Brocade · Brocade SANnav
Medium6.1
CVE-2026-5047
A vulnerability in Brocade SANnav before 2.4.0b and 3.0.0 prints encoded passwords and authentication tokens in log files. The vulnerability could allow an…Brocade · Brocade SANnav
High8.2
CVE-2023-5649
An Improper Input Validation vulnerability for the registered case credentials in Brocade ASCG before v3.0 could allow a local authenticated user to provide…Brocade · Brocade Active Support Connectivity Gateway
Medium6.8
CVE-2023-5648
In Brocade ASCG before Brocade ASCG v3.0, several security-related HTTP Headers were missing in various Brocade ASCG URL paths, aiding unauthenticated…Brocade · Active Support Connectivity Gateway
Medium6.5
CVE-2026-94585
An authentication bypass vulnerability exists in the web management interface of Brocade Fabric OS versions before 9.2.2d running on the MXG610 platform. An…Brocade · Fabric OS
High7.7
CVE-2026-94587
A buffer overflow vulnerability exists in the WebTools administrative interface handling configuration download or file transfer operations of Brocade Fabric…Brocade · Fabric OS
Medium6.9
CVE-2026-94579
An OS command injection vulnerability exists in the PAM (Pluggable Authentication Module) session cleanup routines during SSH session termination on Brocade…Brocade · Fabric OS
Medium5.4
CVE-2026-94576
An authentication logic and privilege escalation vulnerability exists in the account management interface of Brocade Fabric OS versions before 9.2.2d and…Brocade · Fabric OS
Medium5.9
CVE-2026-87661
Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 directly accepts Apache configuration file data during service setup or re-initialization.…Brocade · Fabric OS
Medium6.8
CVE-2026-87677
An OS command injection vulnerability exists in the account management subsystem of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. When…Brocade · Fabric OS
Medium5.4
CVE-2026-94586
A command injection vulnerability exists in the WebTools administrative interface handling configuration download or file transfer operations of Brocade Fabric…Brocade · Fabric OS
High8.5
CVE-2026-94581
An OS command injection vulnerability exists in the REST API management interface of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1…Brocade · Fabric OS
High8.5
CVE-2026-94577
A privilege escalation vulnerability exists in the internal Command-Line Interface (CLI) authorization handling mechanism of Brocade Fabric OS versions before…Brocade · Fabric OS
High7.3
CVE-2026-87664
A session context forgery vulnerability exists in the web management daemon of Brocade Fabric OS versions 9.2.2d and 10.0.0 through 10.0.0a1. When processing…Brocade · Fabric OS
High8.5
CVE-2026-87663
An authentication bypass and command injection vulnerability exists in the inter-switch remote execution service of Brocade Fabric OS versions before 9.2.2d…Brocade · Fabric OS
High7.1
CVE-2026-87662
Brocade Fabric versions before 9.2.2d and 10.0.0 through 10.0.0a1 handling of specific download protocols utilizes unsanitized parameter strings. When…Brocade · Fabric OS
High7.0
CVE-2026-87660
An improper file permission and missing authorization vulnerability exists in the diagnostic kernel module subsystem of Brocade Fabric OS versions before…Brocade · Fabric OS
High7.0
CVE-2026-87667
An argument injection vulnerability exists in the configuration management command-line utility of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through…Brocade · Fabric OS
High8.4
CVE-2026-87666
An OS command injection vulnerability exists in the time and zone management subsystem of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1.…Brocade · Fabric OS
High8.6
CVE-2026-87675
An OS command injection vulnerability exists in the configuration management subsystem of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1.…Brocade · Fabric OS
High7.3
CVE-2026-87674
A local privilege escalation vulnerability exists in the system logging daemon of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1.…Brocade · Fabric OS
High8.5
CVE-2026-87673
An OS command injection vulnerability exists in maintenance command-line diagnostic utilities on Brocade Fabric OS versions before 9.2.2d and 10.0.0 through…Brocade · Fabric OS
High7.0
CVE-2026-87687
An authorization and input validation vulnerability exists in Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. An authenticated user with…Brocade · Fabric OS
High8.5
CVE-2026-87685
An arbitrary file manipulation vulnerability exists in the WebTools management interface of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through…Brocade · Fabric OS
High8.4
CVE-2026-87688
An input validation vulnerability exists in the security certificate management component of the Brocade Fabric OS administrative management API. When…Brocade · Fabric OS
High8.5
CVE-2026-94584
A race condition and thread-safety vulnerability exists in the web management daemon of Brocade Fabric OS versions before 10.0.1. When handling user…Brocade · Fabric OS
Low2.1
CVE-2026-94580
An arbitrary file and directory deletion vulnerability exists in the REST API management interface handling USB storage operations on Brocade Fabric OS…Brocade · Fabric OS
Medium5.7
CVE-2026-94575
A logic vulnerability in Brocade Fabric OS versions before 10.0.1 web management framework allows an authenticated, low-privileged user to bypass inner…Brocade · Fabric OS
Medium6.9
CVE-2026-94583
A race condition vulnerability exists in the request processing logic of the REST management interface on Brocade Fabric OS versions before 10.0.1. When…Brocade · Fabric OS
Low2.1
CVE-2026-94582
A memory buffer overflow vulnerability exists in the internal diagnostic and route validation routines used by the Fabric Shortest Path First (FSPF) protocol…Brocade · Fabric OS
Medium6.8
CVE-2026-87668
A stack-based buffer overflow vulnerability exists in the diagnostic execution utility of Brocade Fabric OS versions before 10.0.1. When processing command…Brocade · Fabric OS
Medium6.9
CVE-2026-87665
A stack-based buffer overflow vulnerability exists in the Internet Key Exchange (IKEv2) protocol handler on Brocade Fabric OS versions before 10.0.1. The…Brocade · Fabric OS
Medium6.0
CVE-2026-87672
An information disclosure vulnerability exists in the SupportLink diagnostic collection utilities of Brocade Fabric OS versions before 10.0.1. When SupportLink…Brocade · Fabric OS
Medium6.8
CVE-2026-87670
An authorization logic vulnerability exists in the Brocade Fabric OS versions before 10.0.1 REST API gateway. The internal gate guarding restricted management…Brocade · Fabric OS
Medium5.1
CVE-2026-87669
A missing authorization check in Brocade Fabric OS versions before 10.0.1 REST API interface of affected platform releases allows an authenticated user,…Brocade · Fabric OS
Medium5.1
CVE-2026-87678
An input validation and output encoding vulnerability exists in the web management interface of Brocade Fabric OS versions before 10.0.1. When configuring…Brocade · Fabric OS
Medium6.9