Brocade vulnerabilities

CVEs per yearBy the year they were published

1. 20202
2. 20222
3. 202321
4. 202436
5. 20246
6. 202670
7. 202614

Known exploitedNewest addition to KEV first

• CVE-2025-1976

  Code injection exposure in Fabric OS 9.1.0 through 9.1.1d6

  Brocade · Fabric OS

  ExploitedHigh8.6

Newest CVEs

• CVE-2026-87428

  In Brocade ASCG before 3.5.0, a local unauthorized user on the ASCG VM who can issue a request to the SANnav host network namespace can extract stored…

  Brocade · Brocade Active Support Connectivity Gateway

  High8.4
• CVE-2026-87426

  An unauthenticated network-based attacker can query specific internal management endpoints on Brocade ASCG versions before 3.5.0 to enumerate the configuration…

  Brocade · Brocade Active Support Connectivity Gateway

  Medium5.3
• CVE-2026-87425

  An unauthenticated remote attacker can modify the TLS client trust store in Brocade ASCG versions before 3.5.0. By supplying an unauthorized Certificate…

  Brocade · Brocade Active Support Connectivity Gateway

  High7.6
• CVE-2026-87424

  A vulnerability in the SupportLink API authentication component of Brocade ASCG versions prior to 3.5.0 allows an attacker to bypass authentication across…

  Brocade · Brocade Active Support Connectivity Gateway

  High8.6
• CVE-2026-85490

  When Brocade ASCG before 3.5.0 processes support bundle archives ingested from remote compromised endpoints, the application fails to sanitize path traversal…

  Brocade · Brocade Active Support Connectivity Gateway

  High7.7
• CVE-2026-85489

  An authentication flaw exists in the Brocade ASCG administrative management service component. An unauthenticated network user can issue direct API requests to…

  Brocade · Brocade Active Support Connectivity Gateway

  High8.7
• CVE-2026-85488

  Brocade ASCG before 3.5.0 has a well-known Brocade default password embedded in a script distributed to every customer. Any local authenticated user with read…

  Brocade · Brocade Active Support Connectivity Gateway

  High7.0
• CVE-2026-85487

  A path traversal vulnerability exists in the HTTP service component of Brocade ASCG versions before 3.5.0. An unauthenticated attacker on the local network…

  Brocade · Brocade Active Support Connectivity Gateway

  High8.6
• CVE-2026-85486

  Brocade ASCG before 3.5.0 improperly processes user input by evaluating form data prior to validation. When an authenticated user submits a configuration form,…

  Brocade · Brocade Active Support Connectivity Gateway

  High8.6
• CVE-2026-85423

  A vulnerability has been identified in the data collection service of Brocade ASCG versions before 3.5.0. An API endpoint within the data collector service…

  Brocade · Brocade Active Support Connectivity Gateway

  High8.6