sirt@brocade.com
organization01
roles
Roles this identity holds.
02
references
Other names and identifiers for this entity.
nvdUS sirt@brocade.com
03
assessed vulnerabilities (155)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-87428US | high7.8 | — | ||
In Brocade ASCG before 3.5.0, a local unauthorized user on the ASCG VM who can issue a request to the SANnav host network namespace can extract stored management credentials for o… | ||||
| CVE-2026-87426US | medium4.3 | — | ||
An unauthenticated network-based attacker can query specific internal management endpoints on Brocade ASCG versions before 3.5.0 to enumerate the configuration details and state of… | ||||
| CVE-2026-87425US | medium6.8 | — | ||
An unauthenticated remote attacker can modify the TLS client trust store in Brocade ASCG versions before 3.5.0. By supplying an unauthorized Certificate Authority (CA) certificate… | ||||
| CVE-2026-87424US | high8.8OT elevated | — | ||
A vulnerability in the SupportLink API authentication component of Brocade ASCG versions prior to 3.5.0 allows an attacker to bypass authentication across deployments due to the us… | ||||
| CVE-2026-85490US | high8.8 | — | ||
When Brocade ASCG before 3.5.0 processes support bundle archives ingested from remote compromised endpoints, the application fails to sanitize path traversal sequences contained wi… | ||||
| CVE-2026-85489US | high8.8OT elevated | — | ||
An authentication flaw exists in the Brocade ASCG administrative management service component. An unauthenticated network user can issue direct API requests to perform privileged a… | ||||
| CVE-2026-85488US | high7.8OT elevated | — | ||
Brocade ASCG before 3.5.0 has a well-known Brocade default password embedded in a script distributed to every customer. Any local authenticated user with read access to the install… | ||||
| CVE-2026-85487US | high8.8 | — | ||
A path traversal vulnerability exists in the HTTP service component of Brocade ASCG versions before 3.5.0. An unauthenticated attacker on the local network could send a manipulated… | ||||
| CVE-2026-85486US | high8.0 | — | ||
Brocade ASCG before 3.5.0 improperly processes user input by evaluating form data prior to validation. When an authenticated user submits a configuration form, the submitted text c… | ||||
| CVE-2026-85423US | high8.8OT elevated | — | ||
A vulnerability has been identified in the data collection service of Brocade ASCG versions before 3.5.0. An API endpoint within the data collector service fails to perform authent… | ||||
| CVE-2026-85422US | high7.8OT elevated | — | ||
A vulnerability in Brocade ASCG version before 3.5.0 could allow an attacker to obtain a static cryptographic key hardcoded into the software binaries to secure sensitive data at r… | ||||
| CVE-2026-85421US | high8.8OT elevated | — | ||
A critical security vulnerability has been identified in Brocade ASCG versions before 3.5.0. The HTTPS service fails to properly enforce authentication or access control checks on… | ||||
| CVE-2026-5769US | medium4.1 | — | ||
A vulnerability in Brocade SANnav before 3.0.1 can have the Brocade Fabric OS switch admin password captured in plaintext within a memory swap file on the server hosting the Brocad… | ||||
| CVE-2026-5049US | medium5.7 | — | ||
A path traversal vulnerability affects the The Zone Alias Import flow feature in Brocade SANnav before 3.0.0a. A local authenticated attacker can write an uploaded content outside… | ||||
| CVE-2026-5048US | high8.0 | — | ||
In Brocade SANnav before 3.0.0a, an SQL Injection vulnerability in various external API inventories have a vulnerability that allows an authenticated attacker to inject malicious d… | ||||
| CVE-2026-5047US | medium5.7 | — | ||
A vulnerability in Brocade SANnav before 2.4.0b and 3.0.0 prints encoded passwords and authentication tokens in log files. The vulnerability could allow an authenticated attacker… | ||||
| CVE-2026-94587US | medium4.5 | — | ||
A buffer overflow vulnerability exists in the WebTools administrative interface handling configuration download or file transfer operations of Brocade Fabric OS versions before 9.2… | ||||
| CVE-2026-94586US | medium6.8 | — | ||
A command injection vulnerability exists in the WebTools administrative interface handling configuration download or file transfer operations of Brocade Fabric OS versions before 9… | ||||
| CVE-2026-94585US | high8.8OT elevated | — | ||
An authentication bypass vulnerability exists in the web management interface of Brocade Fabric OS versions before 9.2.2d running on the MXG610 platform. An unauthenticated, networ… | ||||
| CVE-2026-94581US | medium6.8 | — | ||
An OS command injection vulnerability exists in the REST API management interface of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 allows an authenticated, h… | ||||