Brocade vulnerabilities
We track 69 vulnerabilities in Brocade products across 6 products. 68 are rated high or critical, and 1 has been exploited in real attacks. The most recent was published on October 8, 2026.
Latest Brocade vulnerabilities
- 7.8 High severity
Brocade Active Support Connectivity Gateway: Insufficiently Protected Credentials
In Brocade ASCG before 3.5.0, a local unauthorized user on the ASCG VM who can issue a request to the SANnav host network namespace can extract stored management credentials for onboarded SANnav instances and compromise connected Brocade SANnav servers or mana
- 8.8 High severity
Brocade Active Support Connectivity Gateway: Use of Hard-coded Cryptographic Key
A vulnerability in the SupportLink API authentication component of Brocade ASCG versions prior to 3.5.0 allows an attacker to bypass authentication across deployments due to the use of a hard coded cryptographic key.
- 8.8 High severity
Brocade Active Support Connectivity Gateway: Improper Limitation of a Pathname to a Restricted Directory
When Brocade ASCG before 3.5.0 processes support bundle archives ingested from remote compromised endpoints, the application fails to sanitize path traversal sequences contained within archive entries prior to extraction. An unauthenticated remote attacker cap
- 8.8 High severity
Brocade Active Support Connectivity Gateway: Missing Authentication for Critical Functionality
An authentication flaw exists in the Brocade ASCG administrative management service component. An unauthenticated network user can issue direct API requests to perform privileged actions, including accessing sensitive system configuration mapping data, modifyi
- 7.8 High severity
Brocade Active Support Connectivity Gateway: Use of Hard-coded Credentials
Brocade ASCG before 3.5.0 has a well-known Brocade default password embedded in a script distributed to every customer. Any local authenticated user with read access to the installation path can discover this credential and perform privilege escalation on affe
- 8.8 High severity
Brocade Active Support Connectivity Gateway: Improper Limitation of a Pathname to a Restricted Directory
A path traversal vulnerability exists in the HTTP service component of Brocade ASCG versions before 3.5.0. An unauthenticated attacker on the local network could send a manipulated API request to the service endpoint bypassing path restrictions to arbitrary fi
- 8.0 High severity
Brocade Active Support Connectivity Gateway: Improper Neutralization of Directives in Dynamically Evaluated Code
Brocade ASCG before 3.5.0 improperly processes user input by evaluating form data prior to validation. When an authenticated user submits a configuration form, the submitted text could immediately be processed. A malicious actor with basic access can supply cr
- 8.8 High severity
Brocade Active Support Connectivity Gateway: Missing Authentication for Critical Functionality
A vulnerability has been identified in the data collection service of Brocade ASCG versions before 3.5.0. An API endpoint within the data collector service fails to perform authentication or authorization checks on incoming requests. An attacker with network a
- 7.8 High severity
Brocade Active Support Connectivity Gateway: Use of Hard-coded Credentials
A vulnerability in Brocade ASCG version before 3.5.0 could allow an attacker to obtain a static cryptographic key hardcoded into the software binaries to secure sensitive data at rest and to protect inter-node communication protocols. An attacker who extracts
- 8.8 High severity
Brocade Active Support Connectivity Gateway: Missing Authentication for Critical Functionality
A critical security vulnerability has been identified in Brocade ASCG versions before 3.5.0. The HTTPS service fails to properly enforce authentication or access control checks on incoming requests. An unauthenticated attacker with network access can issue con
- 8.0 High severity
Brocade SANnav: Improper Neutralization of Special Elements used in an SQL Command
In Brocade SANnav before 3.0.0a, an SQL Injection vulnerability in various external API inventories have a vulnerability that allows an authenticated attacker to inject malicious data into some of the REST API -query parameters.
- 8.8 High severity
Fabric OS: Authentication Bypass Using an Alternate Path or Channel
An authentication bypass vulnerability exists in the web management interface of Brocade Fabric OS versions before 9.2.2d running on the MXG610 platform. An unauthenticated, network-adjacent attacker can exploit an unauthenticated endpoint within the Single Si
- 8.0 High severity
Fabric OS: Improper Neutralization of Special Elements used in an OS Command
An OS command injection vulnerability exists in the PAM (Pluggable Authentication Module) session cleanup routines during SSH session termination on Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. An authenticated user authenticating via
- 7.8 High severity
Fabric OS: External Control of System or Configuration Setting
A privilege escalation vulnerability exists in the internal Command-Line Interface (CLI) authorization handling mechanism of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. An authenticated user or local process that can manipulate the pr
- 8.0 High severity
Fabric OS: Partial String Comparison
An authentication logic and privilege escalation vulnerability exists in the account management interface of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. Under specific conditions, an authenticated user can bypass authorization restric
- 7.8 High severity
Fabric OS: Missing Authentication for Critical Functionality
A session context forgery vulnerability exists in the web management daemon of Brocade Fabric OS versions 9.2.2d and 10.0.0 through 10.0.0a1. When processing local inter-process communication (IPC) storage callbacks, the service accepts and registers session s
- 7.3 High severity
Fabric OS: Improper Neutralization of Argument Delimiters in a Command
An authorization and input validation vulnerability exists in Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. An authenticated user with restricted privileges in one Virtual Fabric can exploit this issue by submitting a specially crafted
- 7.8 High severity
Fabric OS: Improper Neutralization of Special Elements used in an OS Command
A local privilege escalation vulnerability exists in the system logging daemon of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. Insufficient access controls on internal inter-process communication (IPC) channels allow an unprivileged lo
- 7.2 High severity
Fabric OS: Improper Neutralization of Special Elements used in an OS Command
An OS command injection vulnerability exists in maintenance command-line diagnostic utilities on Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. The binary fails to sanitize user-supplied input options when invoking underlying system comm
- 8.0 High severity
Fabric OS: Improper Neutralization of Special Elements used in an OS Command
An OS command injection vulnerability exists in the time and zone management subsystem of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. When updating system timezone settings via the REST API or configuration download routines, the syst
- 7.1 High severity
Fabric OS: Incorrect Permission Assignment for Critical Resource
An improper file permission and missing authorization vulnerability exists in the diagnostic kernel module subsystem of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. An unprivileged local user can invoke privileged hardware tests, force
- 7.8 High severity
Fabric OS: Buffer Copy without Checking Size of Input
A memory buffer overflow vulnerability exists in the internal diagnostic and route validation routines used by the Fabric Shortest Path First (FSPF) protocol component of Brocade Fabric OS versions before 10.0.1. While this code path is part of internal diagno
- 8.8 High severity
Fabric OS: Improper Privilege Management
Brocade Fabric OS versions before 10.0.1 contain an authorization logic vulnerability in the AAA (Authentication, Authorization, and Accounting) integration framework allows remote authenticated users to gain root-equivalent chassis access controls. By returni
- 9.8 Critical severity
Fabric OS: Stack-based Buffer Overflow
A stack-based buffer overflow vulnerability exists in the SNMP daemon request handling of Brocade Fabric versions before 10.0.1. When processing an incoming SNMPv3 packet, an internal statistics gathering handler copies user-supplied context name data into a f
- 7.5 High severity
Fabric OS: Out-of-bounds Read
An out-of-bounds memory read vulnerability exists in the web management daemon of Brocade Fabric OS versions before 10.0.1. Unauthenticated HTTP endpoints process specific URL query parameters without validating array index boundaries or performing numerical r
- 7.5 High severity
Fabric OS: Stack-based Buffer Overflow
A stack-based buffer overflow vulnerability exists in the Internet Key Exchange (IKEv2) protocol handler on Brocade Fabric OS versions before 10.0.1. The vulnerability occurs when processing initial IKE key exchange requests on extension switches or blades run
- 9.8 Critical severity
Fabric OS: Missing Authentication for Critical Functionality
A critical authorization bypass vulnerability exists in the Management Server handling of Brocade Fabric OS versions before 10.0.1. A compromised switch connected to the fabric can transmit crafted inband Fibre Channel vendor-unique CT (Common Transport) manag
- 8.8 High severity
Fabric OS: Stack-based Buffer Overflow
Multiple stack-based buffer overflow vulnerabilities exist in the REST API management component of Brocade Fabric OS versions prior to 10.0.1. When processing API request payloads (such as device configuration attributes or port mapping requests) the REST API
- 8.8 High severity
Fabric OS: Improper Neutralization of Special Elements used in an OS Command
Multiple OS Command Injection vulnerabilities exist in the management interface and session processing routines of Brocade Fabric OS versions before 10.0.1. Input processing flaws during remote management connection validation and session verification for dire
- 8.8 High severity
Fabric OS: Improper Neutralization of Special Elements used in an OS Command
A command injection vulnerability in the REST API management interface of Brocade Fabric OS versions before 10.0.1 allows an authenticated user to execute arbitrary system commands via crafted input parameters.
- 7.2 High severity
Fabric OS: Heap-based Buffer Overflow
When Brocade Fabric OS versions before 10.0.1 processes trunk configuration operations, the application parses user-supplied list strings into dynamically allocated heap arrays without enforcing boundary checks on the maximum allowable number of elements. An a
- 8.4 High severity
SANnav: Insertion of Sensitive Information into Log File
Incomplete log sanitization during bulk IPsec policy collection in Brocade SANnav versions before 3.0.1a permit extension switch pre-shared keys to be written to system logs. Individuals with read access to container logs or support archives can obtain these k
- 8.5 High severity
SANnav: Insertion of Sensitive Information into Log File
Improper handling of sensitive data during IPsec policy creation and modification in Brocade SANnav versions before 3.0.1a results in pre-shared keys being recorded in application logs. Individuals with read access to system log files or support bundles can vi
- 8.5 High severity
SANnav: Insertion of Sensitive Information into Log File
Plaintext exposure of sensitive authentication data in Brocade SANnav discovery service log files enables individuals with file read access to retrieve administrative switch credentials and active session tokens. An attacker with access to system logs or suppo
- 8.6 High severity
SANnav: Improper Neutralization of Special Elements used in a Command
Unauthenticated remote command injection in the Brocade SANnav orchestrator HTTP service permits network-adjacent attackers to execute arbitrary administrative switch CLI commands and issue container management instructions. This could allow an attacker to alt
- 8.6 High severity
SANnav: Improper Neutralization of Special Elements used in an OS Command
Insufficient input sanitization of shell metacharacters in the Brocade SANnav CLI scripting component permits authenticated users to break out of restricted execution contexts on managed switches. An attacker with command execution permissions can leverage thi
- 8.7 High severity
SANnav: Improper Access Control
Insecure access controls on internal service ports in Brocade SANnav versions before 3.0.1a allow local, non-administrative host users to communicate directly with backend management services. A local attacker can leverage this exposed access to transmit comma
- 8.8 High severity
ASCG: Authentication Bypass by Primary Weakness
Authentication bypass in Brocade ASCG 3.4.0 Could allow an unauthorized user to perform ASCG operations related to Brocade Support Link(BSL) and streaming configuration. and could even disable the ASCG application or disable use of BSL data collection on Broca
- 7.8 High severity
Fabric OS: Least Privilege Violation
A vulnerability in Brocade Fabric OS before 9.2.1c3 could allow elevating the privileges of the local authenticated user to “root” using the export option of seccertmgmt and seccryptocfg commands.
- 7.8 High severity
Fabric OS: Improper Neutralization of Special Elements used in an OS Command
A vulnerability in Brocade Fabric OS could allow an authenticated, local attacker with privileges to access the Bash shell to access insecurely stored file contents including the history command.