How many CVEs does Brocade have?

Brocade has 132 published CVE records since 2005, including 24 in the last two years.

How many Brocade CVEs are in CISA KEV?

Yes — 2 of Brocade's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.

Which Brocade products have the most CVEs?

The Brocade products with the most published CVEs are Brocade SAnnav, Fabric OS, SANnav, Brocade Fabric OS, fabric operating system.

What are the most common weakness types in Brocade CVEs?

Brocade's CVEs most often map to these CWE weakness types: CWE-312 (Cleartext Storage of Sensitive Information), CWE-532 (Insertion of Sensitive Information into Log File), CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor), CWE-78 (Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')).

Are there public exploits for Brocade vulnerabilities?

Yes — 6 of Brocade's CVEs have a known public exploit.

How many critical Brocade vulnerabilities are there?

Brocade has 9 critical and 67 high-severity CVEs.

What is the average severity of Brocade CVEs?

The average CVSS base score across Brocade's scored CVEs is 7.0.

RadicalNotion.AI

Log in Start free

Log in

Log in Start free

132 CVEs

2 in CISA KEV

Brocade Vulnerabilities

Name: Brocade vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for Brocade.

132

Total CVEs

Published

2

In CISA KEV

Exploited in the wild

6

Public exploits

PoC or exploit code

7.0

Avg CVSS

2005–2026

Overview

Brocade has 132 published CVE records since 2005, of which 2 are in CISA's Known Exploited Vulnerabilities catalog and 6 have a known public exploit. The average CVSS base score across scored CVEs is 7.0.

This page aggregates every publicly disclosed vulnerability (CVE) affecting Brocade products, with severity breakdowns, the most-affected products, the most common weakness types, and the latest disclosures.

Security scorecard

A quick read on Brocade's vulnerability posture, as a share of its 132 published CVEs.

Average CVSS: 7.0
Critical / high: 58%
Actively exploited (KEV): 2%
Public exploit available: 5%
Patch available: 80%

Severity and exploitation

How the CVSS severity of Brocade's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical9

High67

Medium55

Low1

In CISA’s Known Exploited Vulnerabilities catalog

2

2 of Brocade's CVEs are confirmed exploited in the wild.

Public exploits

6

6 of Brocade's CVEs have a known public exploit available.

Most affected products

The Brocade products with the most published CVEs. Follow any product to browse its versions and vulnerabilities.

Common weakness types

The CWE weakness categories most often found in Brocade CVEs. Follow any weakness for its full explanation.

CNAs that assign these CVEs

The CVE Numbering Authorities that publish Brocade CVE records.

Disclosure activity by year

How many Brocade CVEs were published each year.

2019

9

2020

5

2021

1

2022

8

2023

18

2024

36

2025

11

2026

13

Latest Brocade CVEs

The most recently disclosed vulnerabilities affecting Brocade.

Application User custom defined accounts are not properly password protected in Brocade ASCG 3.4.0
CWE-305
High · CVSS 8.3
EPSS 0.4%2026-03-03
Directory transversal vulnerability in Brocade Fabric OS before 9.2.1c2 and 9.2.2 through 9.2.2a using various shell commands
CWE-35
Medium · CVSS 4.6
EPSS 0.2%2026-02-03
Privilege escalation in Brocade Fabric OS before 9.2.1c3, and 9.2.2 though 9.2.2b
CWE-272
High · CVSS 8.5
EPSS 0.1%2026-02-03
Directory transversal vulnerability in Brocade Fabric OS before 9.2.1 using grep command
CWE-35
Medium · CVSS 4.6
EPSS 0.2%2026-02-03
Information disclosure in Brocade Fabric OS before 9.2.1c2, 9.2.2 through 9.2.2a and 10.0.0
CWE-78
High · CVSS 8.2
EPSS 0.2%2026-02-03
Password Exposure in Brocade Fabric OS
CWE-250
Medium · CVSS 6.0
EPSS 0.1%2026-02-03
Privilege escalation via bind command in Brocade Fabric OS
CWE-250
High · CVSS 8.4
EPSS 0.5%2026-02-03
Privilege escalation in Brocade Fabric before 9.2.1c2 and 9.2.2 through 9.2.2a
CWE-305
High · CVSS 8.5
EPSS 0.6%2026-02-03
SQL queries with sensitive information printed in logs with Brocade SANnav before 3.0
CWE-312
Medium · CVSS 4.6
EPSS 0.2%2026-02-03
Plain password is generated in the audit logs while executing update-reports-purge-settings.sh script with Brocade SANnav before 2.4.0a
CWE-209
High · CVSS 7.1
EPSS 0.3%2026-02-03
Plaintext Switch admin login password is seen in Brocade SANnav support save
CWE-312
High · CVSS 8.5
EPSS 0.3%2026-02-02
Plain text pbe key visible in audit log during Brocade SANnav migration from 2.4.0a to 3.0.0
CWE-312
High · CVSS 7.1
EPSS 0.1%2026-02-02

Track new Brocade CVEs as they are disclosed and get AI-written analysis and remediation guidance.

Monitor Brocade CVEs

Other vendors

Browse vulnerabilities for other tracked vendors.

WebKitGTK+133 CVEs thimpress133 CVEs Motorola132 CVEs ManageEngine132 CVEs Puppet132 CVEs Honeywell131 CVEs PowerDNS131 CVEs symfony131 CVEs

Browse all vendors

Frequently asked questions

Common questions about Brocade vulnerabilities.

How many CVEs does Brocade have?: Brocade has 132 published CVE records since 2005, including 24 in the last two years.
How many Brocade CVEs are in CISA KEV?: Yes — 2 of Brocade's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.
Which Brocade products have the most CVEs?: The Brocade products with the most published CVEs are Brocade SAnnav, Fabric OS, SANnav, Brocade Fabric OS, fabric operating system.
What are the most common weakness types in Brocade CVEs?: Brocade's CVEs most often map to these CWE weakness types: CWE-312 (Cleartext Storage of Sensitive Information), CWE-532 (Insertion of Sensitive Information into Log File), CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor), CWE-78 (Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')).
Are there public exploits for Brocade vulnerabilities?: Yes — 6 of Brocade's CVEs have a known public exploit.
How many critical Brocade vulnerabilities are there?: Brocade has 9 critical and 67 high-severity CVEs.
What is the average severity of Brocade CVEs?: The average CVSS base score across Brocade's scored CVEs is 7.0.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track Brocade vulnerabilities

Monitor new Brocade vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing