CVE Tools
Track your stack

Broadcom

665 CVEs tracked since 1999. Since Jun 2016, 1 of them reached CISA KEV.

Broadcom CVEs per month

Jun 2016 to Nov 2026. Point at a month, or focus the strip and use the arrow keys.
Broadcom CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2016-0660
2016-0710
2016-08no snapshot
2016-090
2016-100
2016-11no snapshot
2016-1210
2017-01no snapshot
2017-021 or fewer
2017-0320
2017-04no snapshot
2017-0540
2017-06no snapshot
2017-071 or fewer
2017-082 or fewer
2017-0930
2017-101 or fewer
2017-11no snapshot
2017-121 or fewer
2018-0120
2018-0220
2018-032 or fewer
2018-04no snapshot
2018-05no snapshot
2018-0690
2018-072 or fewer
2018-0870
2018-0920
2018-1040
2018-11no snapshot
2018-1240
2019-01no snapshot
2019-0250
2019-03no snapshot
2019-04no snapshot
2019-051 or fewer
2019-06no snapshot
2019-072 or fewer
2019-0820
2019-092 or fewer
2019-1020
2019-11210
2019-1220
2020-0140
2020-0290
2020-032 or fewer
2020-04no snapshot
2020-05no snapshot
2020-0630
2020-07no snapshot
2020-082 or fewer
2020-09110
2020-1030
2020-1120
2020-1260
2021-0170
2021-0220
2021-03no snapshot
2021-0450
2021-052 or fewer
2021-06140
2021-072 or fewer
2021-0860
2021-0941
2021-102 or fewer
2021-1140
2021-122 or fewer
2022-0130
2022-0270
2022-0390
2022-043 or fewer
2022-0550
2022-06130
2022-073 or fewer
2022-0850
2022-093 or fewer
2022-10110
2022-113 or fewer
2022-1270
2023-0140
2023-023 or fewer
2023-03no snapshot
2023-043 or fewer
2023-053 or fewer
2023-0640
2023-073 or fewer
2023-08390
2023-093 or fewer
2023-104 or fewer
2023-114 or fewer
2023-124 or fewer
2024-0150
2024-024 or fewer
2024-034 or fewer
2024-04260
2024-055 or fewer
2024-0640
2024-07110
2024-084 or fewer
2024-093 or fewer
2024-104 or fewer
2024-1180
2024-123 or fewer
2025-0180
2025-0270
2025-035 or fewer
2025-044 or fewer
2025-054 or fewer
2025-06100
2025-0790
2025-0870
2025-094 or fewer
2025-104 or fewer
2025-1180
2025-125 or fewer
2026-01130
2026-02120
2026-037 or fewer
2026-046 or fewer
2026-057 or fewer
2026-0680
2026-07130
2026-08110
2026-099 or fewer
2026-10630
2026-110

Products

The products that kept showing up in Broadcom's monthly top three, with their CVEs summed over those months.

  1. Fabric Operating System11524 months
  2. Brocade Sannav5310 months
  3. Tcpreplay3214 months
  4. Lsi Storage Authority (Lsa)221 month
  5. Raid Controller Web Interface221 month
  6. Brocade Fabric Operating System Firmware207 months
  7. Sannav205 months
  8. Symantec Privileged Access Management193 months
  9. Brocade Active Support Connectivity Gateway141 month
  10. BCM5820X132 months

Latest CVEs

The 15 most recently published vulnerabilities affecting Broadcom.

  1. CVE-2026-101034Security Advisory for offline recovery of Symantec GSS 3.3 RU11 stored domain credentials—
  2. CVE-2026-19810Cross-Site Scripting (XSS) in Symantec Endpoint Detection and Response Console5.4
  3. CVE-2026-87428In Brocade ASCG before 3.5.0, a  local unauthorized user on the ASCG VM who can issue a request to the SANnav host network namespace can extract stored management credentials for onboarded SANnav ...7.8
  4. CVE-2026-87426An unauthenticated network-based attacker can query specific internal management endpoints on Brocade ASCG versions before 3.5.0 to enumerate the configuration details and state of managed Brocade ...4.3
  5. CVE-2026-87425An unauthenticated remote attacker can modify the TLS client trust store in Brocade ASCG versions before 3.5.0. By supplying an unauthorized Certificate Authority (CA) certificate to an unauthentic...6.8
  6. CVE-2026-87424A vulnerability in the SupportLink API authentication component of Brocade ASCG versions prior to 3.5.0 allows an attacker to bypass authentication across deployments due to the use of a hard coded...8.8
  7. CVE-2026-85490When Brocade ASCG before 3.5.0 processes support bundle archives ingested from remote compromised endpoints, the application fails to sanitize path traversal sequences contained within archive entr...8.8
  8. CVE-2026-85489An authentication flaw exists in the Brocade ASCG administrative management service component. An unauthenticated network user can issue direct API requests to perform privileged actions, including...8.8
  9. CVE-2026-85488Brocade ASCG before 3.5.0 has a well-known Brocade default password embedded in a script distributed to every customer. Any local authenticated user with read access to the installation path can di...7.8
  10. CVE-2026-85487A path traversal vulnerability exists in the HTTP service component of Brocade ASCG versions before 3.5.0. An unauthenticated attacker on the local network could send a manipulated API request to t...8.8
  11. CVE-2026-85486Brocade ASCG before 3.5.0 improperly processes user input by evaluating form data prior to validation. When an authenticated user submits a configuration form, the submitted text could immediately ...8.0
  12. CVE-2026-85423A vulnerability has been identified in the data collection service of Brocade ASCG versions before 3.5.0. An API endpoint within the data collector service fails to perform authentication or author...8.8
  13. CVE-2026-85422A vulnerability in Brocade ASCG version before 3.5.0 could allow an attacker to obtain a static cryptographic key hardcoded into the software binaries to secure sensitive data at rest and to protec...7.8
  14. CVE-2026-85421A critical security vulnerability has been identified in Brocade ASCG versions before 3.5.0. The HTTPS service fails to properly enforce authentication or access control checks on incoming requests...8.8
  15. CVE-2026-5769A vulnerability in Brocade SANnav before 3.0.1 can have the Brocade Fabric OS switch admin password captured in plaintext within a memory swap file on the server hosting the Brocade SANnav Virtual ...4.1

The record

Peak rank
#2 in Dec 2003
Busiest month shown
Oct 2026, 63 CVEs
Months with a KEV entry
1 since Jun 2016
Monthly snapshots
124 since 1999
Broadcom's full record, month by month