Known Vulnerabilities for products from Broadcom

Listed below are 20 of the newest known vulnerabilities associated with the vendor "Broadcom".

These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.

Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.

Additional devices specifications by Broadcom can be found at device.report : Broadcom

Known Vulnerabilities

CVE Shortened Description Severity Publish Date Last Modified
CVE-2026-94587 json A buffer overflow vulnerability exists in the WebTools administrative interface handling configuration download or file trans... Not Provided 2026-10-08 2026-10-14
CVE-2026-94586 json A command injection vulnerability exists in the WebTools administrative interface handling configuration download or file tra... Not Provided 2026-10-08 2026-10-14
CVE-2026-94585 json An authentication bypass vulnerability exists in the web management interface of Brocade Fabric OS versions before 9.2.2d run... Not Provided 2026-10-08 2026-10-14
CVE-2026-94584 json A race condition and thread-safety vulnerability exists in the web management daemon of Brocade Fabric OS versions before 10.... Not Provided 2026-10-08 2026-10-14
CVE-2026-94583 json A race condition vulnerability exists in the request processing logic of the REST management interface on Brocade Fabric OS v... Not Provided 2026-10-08 2026-10-14
CVE-2026-94582 json A memory buffer overflow vulnerability exists in the internal diagnostic and route validation routines used by the Fabric Sho... Not Provided 2026-10-08 2026-10-14
CVE-2026-94581 json An OS command injection vulnerability exists in the REST API management interface of Brocade Fabric OS versions before 9.2.2d... Not Provided 2026-10-08 2026-10-14
CVE-2026-94580 json An arbitrary file and directory deletion vulnerability exists in the REST API management interface handling USB storage opera... Not Provided 2026-10-08 2026-10-14
CVE-2026-94579 json An OS command injection vulnerability exists in the PAM (Pluggable Authentication Module) session cleanup routines during SSH... Not Provided 2026-10-08 2026-10-14
CVE-2026-94578 json Brocade Fabric OS versions before 10.0.1 contain an authorization logic vulnerability in the AAA (Authentication, Authorizati... Not Provided 2026-10-08 2026-10-14
CVE-2026-94577 json A privilege escalation vulnerability exists in the internal Command-Line Interface (CLI) authorization handling mechanism of ... Not Provided 2026-10-08 2026-10-14
CVE-2026-94576 json An authentication logic and privilege escalation vulnerability exists in the account management interface of Brocade Fabric O... Not Provided 2026-10-08 2026-10-14
CVE-2026-94575 json A logic vulnerability in Brocade Fabric OS versions before 10.0.1 web management framework allows an authenticated, low-privi... Not Provided 2026-10-08 2026-10-14
CVE-2026-87688 json An input validation vulnerability exists in the security certificate management component of the Brocade Fabric OS administra... Not Provided 2026-10-08 2026-10-14
CVE-2026-87687 json An authorization and input validation vulnerability exists in Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.... Not Provided 2026-10-08 2026-10-14
CVE-2026-87686 json An authentication and access control bypass vulnerability exists in the web server management interface of Brocade Fabric OS ... Not Provided 2026-10-08 2026-10-14
CVE-2026-87685 json An arbitrary file manipulation vulnerability exists in the WebTools management interface of Brocade Fabric OS versions before... Not Provided 2026-10-08 2026-10-14
CVE-2026-87684 json A stack-based buffer overflow vulnerability exists in the SNMP daemon request handling of Brocade Fabric versions before 10.0... Not Provided 2026-10-08 2026-10-14
CVE-2026-87683 json Multiple stack-based buffer overflow vulnerabilities exist in the REST API management component of Brocade Fabric OS versions... Not Provided 2026-10-08 2026-10-13
CVE-2026-87682 json Multiple OS Command Injection vulnerabilities exist in the management interface and session processing routines of Brocade Fa... Not Provided 2026-10-08 2026-10-13

Known software with vulnerabilities from Broadcom

Type Vendor Product Version
ApplicationBroadcomAdvanced Control Suite8.20.1
ApplicationBroadcomAsf Management Applications10.16.2
HardwareBroadcomBcm43012-
Operating
System
BroadcomBcm43012 Firmware-
HardwareBroadcomBcm43013-
Operating
System
BroadcomBcm43013 Firmware-
HardwareBroadcomBcm43162-
HardwareBroadcomBcm43224-
HardwareBroadcomBcm4323-
HardwareBroadcomBcm4356-
Operating
System
BroadcomBcm4356 Firmware-
HardwareBroadcomBcm43684-
HardwareBroadcomBcm43694-
HardwareBroadcomBcm4375-
HardwareBroadcomBcm43752-
Operating
System
BroadcomBcm43752 Firmware-
Operating
System
BroadcomBcm4375 Firmware-
HardwareBroadcomBcm4389-
Operating
System
BroadcomBcm4389 Firmware-
HardwareBroadcomBcm47622-

© CVE.report 2026

Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.

CVE, CWE, and OVAL are registred trademarks of The MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. This site includes MITRE data granted under the following license.

Free CVE JSON API cve.report/api

CVE.report and Source URL Uptime Status status.cve.report