Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-87426 | medium | 4.3 | No | An unauthenticated network-based attacker can query specific internal management endpoints on Brocade ASCG versions before 3.5.0 to enumerat... | 2026-10-14 |
| CVE-2026-106349 | high | 8.8 | No | Use after free in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a cr... | 2026-10-14 |
| CVE-2026-87425 | medium | 6.8 | No | An unauthenticated remote attacker can modify the TLS client trust store in Brocade ASCG versions before 3.5.0. By supplying an unauthorized... | 2026-10-14 |
| CVE-2026-106350 | high | 8.8 | No | Incorrect authorization in Browser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via a c... | 2026-10-14 |
| CVE-2026-87424 | high | 8.8 | No | A vulnerability in the SupportLink API authentication component of Brocade ASCG versions prior to 3.5.0 allows an attacker to bypass authent... | 2026-10-14 |
| CVE-2026-85490 | high | 8.8 | No | When Brocade ASCG before 3.5.0 processes support bundle archives ingested from remote compromised endpoints, the application fails to saniti... | 2026-10-14 |
| CVE-2026-106351 | medium | 5.3 | No | Observable discrepancy in Safebrowsing in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker who had compromised the r... | 2026-10-14 |
| CVE-2026-85489 | high | 8.8 | No | An authentication flaw exists in the Brocade ASCG administrative management service component. An unauthenticated network user can issue dir... | 2026-10-14 |
| CVE-2026-85488 | high | 7.8 | No | Brocade ASCG before 3.5.0 has a well-known Brocade default password embedded in a script distributed to every customer. Any local authentica... | 2026-10-14 |
| CVE-2026-106352 | high | 8.8 | No | Incorrect authorization in WebProtect in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obt... | 2026-10-14 |
| CVE-2026-85487 | high | 8.8 | No | A path traversal vulnerability exists in the HTTP service component of Brocade ASCG versions before 3.5.0. An unauthenticated attacker on th... | 2026-10-14 |
| CVE-2026-85486 | high | 8.0 | No | Brocade ASCG before 3.5.0 improperly processes user input by evaluating form data prior to validation. When an authenticated user submits a... | 2026-10-14 |
| CVE-2026-102776 | medium | 4.3 | No | Joomla Extension - svenbluege.de - Cross-site request forgery of list tasks of the backend in Event Gallery extension < 6.6.0 - Eight tasks... | 2026-10-14 |
| CVE-2026-85423 | high | 8.8 | No | A vulnerability has been identified in the data collection service of Brocade ASCG versions before 3.5.0. An API endpoint within the data co... | 2026-10-14 |
| CVE-2026-102778 | medium | 6.1 | No | Joomla Extension - svenbluege.de - Cross-site scripting and open redirect on the share mini page in Event Gallery extension < 6.6.0 - The pa... | 2026-10-14 |
| CVE-2026-102780 | critical | 9.8 | No | Joomla Extension - joomlafry.com - Unauthenticated cross-record publication and mass assignment in TF Content 2.9.0 - 2.9.4 - The extension... | 2026-10-14 |
| CVE-2026-106353 | medium | 6.5 | No | Improper input validation in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineerin... | 2026-10-14 |
| CVE-2026-85422 | high | 7.8 | No | A vulnerability in Brocade ASCG version before 3.5.0 could allow an attacker to obtain a static cryptographic key hardcoded into the softwar... | 2026-10-14 |
| CVE-2026-106354 | medium | 4.3 | No | Improper resource exposure in Extensions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain cross-origin data via a... | 2026-10-14 |
| CVE-2026-106355 | medium | 5.3 | No | Missing authorization in Media in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker who had compromised the rende... | 2026-10-14 |