CVE-2025-58381

A vulnerability in Brocade Fabric OS before 9.2.1c2 could allow an authenticated attacker with admin privileges using the shell commands “source, ping6, sleep, disown, wait to modify the path variables and move upwards in the directory structure or to traverse to different directories.

Score

CVSS 4.0 4.6 Medium

Status

Analyzed - sirt@brocade.com

Published

2026-02-03

Last modified

2026-02-04

Weaknesses

CWE-35

Affected products

• Fabric Operating System (Broadcom)
• Fabric Os (Brocade)

References

• https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36853