NVD Vulnerabilities

Severity Distribution

Publication Trend

Vulnerability Database

CVE ID Description Published Base Score Attack Vector Severity Actions
CVE-2026-87428 In Brocade ASCG before 3.5.0, a  local unauthorized user on the ASCG VM who can issue a request to the SANnav host network namespace can extract store... 2026-10-08 8.4 LOCAL HIGH NVD
CVE-2026-87426 An unauthenticated network-based attacker can query specific internal management endpoints on Brocade ASCG versions before 3.5.0 to enumerate the conf... 2026-10-08 5.3 ADJACENT MEDIUM NVD
CVE-2026-87425 An unauthenticated remote attacker can modify the TLS client trust store in Brocade ASCG versions before 3.5.0. By supplying an unauthorized Certifica... 2026-10-08 7.6 ADJACENT HIGH NVD
CVE-2026-87424 A vulnerability in the SupportLink API authentication component of Brocade ASCG versions prior to 3.5.0 allows an attacker to bypass authentication ac... 2026-10-08 8.6 ADJACENT HIGH NVD
CVE-2026-85490 When Brocade ASCG before 3.5.0 processes support bundle archives ingested from remote compromised endpoints, the application fails to sanitize path tr... 2026-10-08 7.7 ADJACENT HIGH NVD
CVE-2026-85489 An authentication flaw exists in the Brocade ASCG administrative management service component. An unauthenticated network user can issue direct API re... 2026-10-08 8.7 ADJACENT HIGH NVD
CVE-2026-85488 Brocade ASCG before 3.5.0 has a well-known Brocade default password embedded in a script distributed to every customer. Any local authenticated user w... 2026-10-08 7.0 LOCAL HIGH NVD
CVE-2026-85487 A path traversal vulnerability exists in the HTTP service component of Brocade ASCG versions before 3.5.0. An unauthenticated attacker on the local ne... 2026-10-08 8.6 ADJACENT HIGH NVD
CVE-2026-85486 Brocade ASCG before 3.5.0 improperly processes user input by evaluating form data prior to validation. When an authenticated user submits a configurat... 2026-10-08 8.6 ADJACENT HIGH NVD
CVE-2026-85423 A vulnerability has been identified in the data collection service of Brocade ASCG versions before 3.5.0. An API endpoint within the data collector se... 2026-10-08 8.6 ADJACENT HIGH NVD
CVE-2026-85422 A vulnerability in Brocade ASCG version before 3.5.0 could allow an attacker to obtain a static cryptographic key hardcoded into the software binaries... 2026-10-08 8.4 LOCAL HIGH NVD
CVE-2026-85421 A critical security vulnerability has been identified in Brocade ASCG versions before 3.5.0. The HTTPS service fails to properly enforce authenticatio... 2026-10-08 8.7 ADJACENT HIGH NVD
CVE-2026-5769 A vulnerability in Brocade SANnav before 3.0.1 can have the Brocade Fabric OS switch admin password captured in plaintext within a memory swap file on... 2026-10-08 5.6 LOCAL MEDIUM NVD
CVE-2026-5049 A path traversal vulnerability affects the The Zone Alias Import flow feature in Brocade SANnav before 3.0.0a. A local authenticated attacker can writ... 2026-10-08 6.9 ADJACENT MEDIUM NVD
CVE-2026-5048 In Brocade SANnav before 3.0.0a, an SQL Injection vulnerability in various external API inventories have a vulnerability that allows an authenticated ... 2026-10-08 6.1 ADJACENT MEDIUM NVD