CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 5,501 CVEs published, 360 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
5,501
Show in the list
Critical, last 7 days
360
Show in the list
Healthcare-tagged, last 7 days
5
Show in the list
Known exploited (CISA KEV)
1,747
Show in the list

Showing CVEs that name the product broadcom:brocade_active_support_connectivity_gateway. Show all products

15 CVEs, showing 1 to 15
CVESeverityTitlePublished
CVE-2026-0869High 8.8Authentication bypass in Brocade ASCG 3.4.0 Could allow an unauthorized user to perform ASCG operations related to Brocade Support Link(BSL) and streaming configuration.Mar 3, 2026
CVE-2023-5648Medium 6.5In Brocade ASCG before Brocade ASCG v3.0, several security-related HTTP Headers were missing in various Brocade ASCG URL paths, aiding unauthenticated attackers to perform attacks such as Cross-Site…
Assigned by brocade
Oct 8, 2026
CVE-2023-5649Medium 6.8An Improper Input Validation vulnerability for the registered case credentials in Brocade ASCG before v3.0 could allow a local authenticated user to provide invalid inputs like special characters lea…
Assigned by brocade
Oct 8, 2026
CVE-2026-85421High 8.7A critical security vulnerability has been identified in Brocade ASCG versions before 3.5.0.
Assigned by brocade
Oct 8, 2026
CVE-2026-85422High 8.4A vulnerability in Brocade ASCG version before 3.5.0 could allow an attacker to obtain a static cryptographic key hardcoded into the software binaries to secure sensitive data at rest and to protect…
Assigned by brocade
Oct 8, 2026
CVE-2026-85423High 8.6A vulnerability has been identified in the data collection service of Brocade ASCG versions before 3.5.0.
Assigned by brocade
Oct 8, 2026
CVE-2026-85486High 8.6Brocade ASCG before 3.5.0 improperly processes user input by evaluating form data prior to validation.
Assigned by brocade
Oct 8, 2026
CVE-2026-85487High 8.6A path traversal vulnerability exists in the HTTP service component of Brocade ASCG versions before 3.5.0.
Assigned by brocade
Oct 8, 2026
CVE-2026-85488High 7.0Brocade ASCG before 3.5.0 has a well-known Brocade default password embedded in a script distributed to every customer.
Assigned by brocade
Oct 8, 2026
CVE-2026-85489High 8.7An authentication flaw exists in the Brocade ASCG administrative management service component.
Assigned by brocade
Oct 8, 2026
CVE-2026-85490High 7.7When Brocade ASCG before 3.5.0 processes support bundle archives ingested from remote compromised endpoints, the application fails to sanitize path traversal sequences contained within archive entrie…
Assigned by brocade
Oct 8, 2026
CVE-2026-87424High 8.6A vulnerability in the SupportLink API authentication component of Brocade ASCG versions prior to 3.5.0 allows an attacker to bypass authentication across deployments due to the use of a hard coded c…
Assigned by brocade
Oct 8, 2026
CVE-2026-87425High 7.6An unauthenticated remote attacker can modify the TLS client trust store in Brocade ASCG versions before 3.5.0.
Assigned by brocade
Oct 8, 2026
CVE-2026-87426Medium 5.3An unauthenticated network-based attacker can query specific internal management endpoints on Brocade ASCG versions before 3.5.0 to enumerate the configuration details and state of managed Brocade Fa…
Assigned by brocade
Oct 8, 2026
CVE-2026-87428High 8.4In Brocade ASCG before 3.5.0, a local unauthorized user on the ASCG VM who can issue a request to the SANnav host network namespace can extract stored management credentials for onboarded SANnav inst…
Assigned by brocade
Oct 8, 2026

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.