Vulnerabilidades em Brocade

151 resultados
Análise Vexday

Com 81 CVEs catalogadas e nenhuma surgida nos últimos 90 dias, o perfil histórico da Brocade apresenta volume moderado, mas a taxa de exploração ativa merece atenção: 1,23% das CVEs constam no catálogo KEV da CISA, o que representa 2,7 vezes a média geral do catálogo — indicador de que vulnerabilidades nesse ecossistema têm histórico desproporcional de aproveitamento real. A CVE mais perigosa em exploração ativa no momento é CVE-2025-1976, com score EPSS de 0,0074, e embora não haja CVEs de severidade crítica nem provas de conceito públicas conhecidas no conjunto atual, a ausência desses fatores não neutraliza o risco dado o padrão de exploração observado. O tipo de falha mais comum, CWE-312 (armazenamento de informações sensíveis em texto claro), sugere atenção a controles de proteção de dados em repouso e em trânsito em implantações Brocade. Equipes de segurança devem priorizar a verificação do status de CVE-2025-1976 em seus ambientes, mesmo diante do EPSS relativamente baixo, considerando o histórico elevado de exploração ativa do vendor.

CVE-2026-87424HIGHA vulnerability in the SupportLink API authentication component of Brocade ASCG versions prior to 3.5.0 allows an attacker to bypass authentEPSS 0.2%CVE-2026-5049MEDIUMA path traversal vulnerability affects the The Zone Alias Import flow feature in Brocade SANnav before 3.0.0a. A local authenticated attackeEPSS 0.2%CVE-2026-94587MEDIUMA buffer overflow vulnerability exists in the WebTools administrative interface handling configuration download or file transfer operations EPSS 0.2%CVE-2026-94585HIGHAn authentication bypass vulnerability exists in the web management interface of Brocade Fabric OS versions before 9.2.2d running on the MXGEPSS 0.2%CVE-2026-87667HIGHAn argument injection vulnerability exists in the configuration management command-line utility of Brocade Fabric OS versions before 9.2.2d EPSS 0.2%CVE-2026-94580MEDIUMAn arbitrary file and directory deletion vulnerability exists in the REST API management interface handling USB storage operations on BrocadEPSS 0.2%CVE-2026-87685HIGHAn arbitrary file manipulation vulnerability exists in the WebTools management interface of Brocade Fabric OS versions before 9.2.2d and 10.EPSS 0.2%CVE-2024-29962MEDIUMInsecure file permission setting that makes files world-readableEPSS 0.2%CVE-2026-87669MEDIUMA missing authorization check in Brocade Fabric OS versions before 10.0.1 REST API interface of affected platform releases allows an authentEPSS 0.2%CVE-2026-87670MEDIUMAn authorization logic vulnerability exists in the Brocade Fabric OS versions before 10.0.1 REST API gateway. The internal gate guarding resEPSS 0.2%CVE-2023-5973MEDIUMTruncated port nameEPSS 0.2%CVE-2023-31428MEDIUMCLI allows upload or transfer files of dangerous typesEPSS 0.2%CVE-2026-87686MEDIUMAn authentication and access control bypass vulnerability exists in the web server management interface of Brocade Fabric OS versions beforeEPSS 0.2%CVE-2026-94575MEDIUMA logic vulnerability in Brocade Fabric OS versions before 10.0.1 web management framework allows an authenticated, low-privileged user to bEPSS 0.2%CVE-2023-4162MEDIUMSegmentation fault in Brocade Fabric OS after Brocade Fabric OS v9.0EPSS 0.2%CVE-2023-31432HIGHPrivilege issues in multiple commandsEPSS 0.2%CVE-2026-82372HIGHImproper handling of sensitive data during IPsec policy creation and modification in Brocade SANnav before 3.0.1.aEPSS 0.2%CVE-2024-29951MEDIUMBrocade SANnav has weak encryption in internal SSH portsEPSS 0.2%CVE-2023-5648MEDIUMIn Brocade ASCG before Brocade ASCG v3.0, several security-related HTTP Headers were missing in various Brocade ASCG URL paths, aiding unautEPSS 0.2%CVE-2024-2860HIGHThe PostgreSQL implementation in Brocade SANnav versions before 2.3.0a is vulnerable to an incorrect local authentication flaw. An attacker EPSS 0.2%