Fabric Os (Brocade) - vulnerabilities (CVEs)

71 CVEs, 43 in the last 30 days, 65 known versions, newest CVE from 2026-10-08. Vendor: Brocade.

CVEs of Fabric Os

• CVE-2026-94585 - CVSS 8.8 (high), 2026-10-08: An authentication bypass vulnerability exists in the web management interface of Brocade Fabric OS versions before 9.2.2d running on the MXG610 platform. An…
• CVE-2026-94587 - CVSS 6.9 (medium), 2026-10-08: A buffer overflow vulnerability exists in the WebTools administrative interface handling configuration download or file transfer operations of Brocade Fabric…
• CVE-2026-94579 - CVSS 8 (high), 2026-10-08: An OS command injection vulnerability exists in the PAM (Pluggable Authentication Module) session cleanup routines during SSH session termination on Brocade…
• CVE-2026-94576 - CVSS 8 (high), 2026-10-08: An authentication logic and privilege escalation vulnerability exists in the account management interface of Brocade Fabric OS versions before 9.2.2d and…
• CVE-2026-87661 - CVSS 6.8 (medium), 2026-10-08: Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 directly accepts Apache configuration file data during service setup or…
• CVE-2026-87677 - CVSS 6.6 (medium), 2026-10-08: An OS command injection vulnerability exists in the account management subsystem of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. When…
• CVE-2026-94586 - CVSS 8.5 (high), 2026-10-08: A command injection vulnerability exists in the WebTools administrative interface handling configuration download or file transfer operations of Brocade…
• CVE-2026-94581 - CVSS 8.5 (high), 2026-10-08: An OS command injection vulnerability exists in the REST API management interface of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1…
• CVE-2026-94577 - CVSS 7.8 (high), 2026-10-08: A privilege escalation vulnerability exists in the internal Command-Line Interface (CLI) authorization handling mechanism of Brocade Fabric OS versions before…
• CVE-2026-87664 - CVSS 8.5 (high), 2026-10-08: A session context forgery vulnerability exists in the web management daemon of Brocade Fabric OS versions 9.2.2d and 10.0.0 through 10.0.0a1. When processing…
• CVE-2026-87663 - CVSS 7.1 (high), 2026-10-08: An authentication bypass and command injection vulnerability exists in the inter-switch remote execution service of Brocade Fabric OS versions before 9.2.2d…
• CVE-2026-87662 - CVSS 7 (high), 2026-10-08: Brocade Fabric versions before 9.2.2d and 10.0.0 through 10.0.0a1 handling of specific download protocols utilizes unsanitized parameter strings. When…
• CVE-2026-87660 - CVSS 7.1 (high), 2026-10-08: An improper file permission and missing authorization vulnerability exists in the diagnostic kernel module subsystem of Brocade Fabric OS versions before…
• CVE-2026-87667 - CVSS 8.4 (high), 2026-10-08: An argument injection vulnerability exists in the configuration management command-line utility of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through…
• CVE-2026-87666 - CVSS 8.6 (high), 2026-10-08: An OS command injection vulnerability exists in the time and zone management subsystem of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through…
• CVE-2026-87675 - CVSS 7.3 (high), 2026-10-08: An OS command injection vulnerability exists in the configuration management subsystem of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through…
• CVE-2026-87674 - CVSS 8.5 (high), 2026-10-08: A local privilege escalation vulnerability exists in the system logging daemon of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1.…
• CVE-2026-87673 - CVSS 7.2 (high), 2026-10-08: An OS command injection vulnerability exists in maintenance command-line diagnostic utilities on Brocade Fabric OS versions before 9.2.2d and 10.0.0 through…
• CVE-2026-87687 - CVSS 8.5 (high), 2026-10-08: An authorization and input validation vulnerability exists in Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. An authenticated user with…
• CVE-2026-87685 - CVSS 8.4 (high), 2026-10-08: An arbitrary file manipulation vulnerability exists in the WebTools management interface of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through…
• CVE-2026-87688 - CVSS 8.5 (high), 2026-10-08: An input validation vulnerability exists in the security certificate management component of the Brocade Fabric OS administrative management API. When…
• CVE-2026-94584 - CVSS 2.6 (low), 2026-10-08: A race condition and thread-safety vulnerability exists in the web management daemon of Brocade Fabric OS versions before 10.0.1. When handling user…
• CVE-2026-94580 - CVSS 5.7 (medium), 2026-10-08: An arbitrary file and directory deletion vulnerability exists in the REST API management interface handling USB storage operations on Brocade Fabric OS…
• CVE-2026-94575 - CVSS 6.9 (medium), 2026-10-08: A logic vulnerability in Brocade Fabric OS versions before 10.0.1 web management framework allows an authenticated, low-privileged user to bypass inner…
• CVE-2026-94583 - CVSS 2.6 (low), 2026-10-08: A race condition vulnerability exists in the request processing logic of the REST management interface on Brocade Fabric OS versions before 10.0.1. When…
• CVE-2026-94582 - CVSS 7.8 (high), 2026-10-08: A memory buffer overflow vulnerability exists in the internal diagnostic and route validation routines used by the Fabric Shortest Path First (FSPF) protocol…
• CVE-2026-87668 - CVSS 6.9 (medium), 2026-10-08: A stack-based buffer overflow vulnerability exists in the diagnostic execution utility of Brocade Fabric OS versions before 10.0.1. When processing command…
• CVE-2026-87665 - CVSS 7.5 (high), 2026-10-08: A stack-based buffer overflow vulnerability exists in the Internet Key Exchange (IKEv2) protocol handler on Brocade Fabric OS versions before 10.0.1. The…
• CVE-2026-87672 - CVSS 6.8 (medium), 2026-10-08: An information disclosure vulnerability exists in the SupportLink diagnostic collection utilities of Brocade Fabric OS versions before 10.0.1. When…
• CVE-2026-87670 - CVSS 5.1 (medium), 2026-10-08: An authorization logic vulnerability exists in the Brocade Fabric OS versions before 10.0.1 REST API gateway. The internal gate guarding restricted management…
• CVE-2026-87669 - CVSS 5.1 (medium), 2026-10-08: A missing authorization check in Brocade Fabric OS versions before 10.0.1 REST API interface of affected platform releases allows an authenticated user,…
• CVE-2026-87678 - CVSS 6.9 (medium), 2026-10-08: An input validation and output encoding vulnerability exists in the web management interface of Brocade Fabric OS versions before 10.0.1. When configuring…
• CVE-2026-87676 - CVSS 6.9 (medium), 2026-10-08: A stack-based buffer overflow vulnerability exists in the security library component of Brocade Fabric OS versions before 10.0.1. When parsing uploaded X.509…
• CVE-2026-87686 - CVSS 5.3 (medium), 2026-10-08: An authentication and access control bypass vulnerability exists in the web server management interface of Brocade Fabric OS versions before 10.0.1. The web…
• CVE-2026-94578 - CVSS 8.8 (high), 2026-10-08: Brocade Fabric OS versions before 10.0.1 contain an authorization logic vulnerability in the AAA (Authentication, Authorization, and Accounting) integration…
• CVE-2026-87659 - CVSS 9.8 (critical), 2026-10-08: A critical authorization bypass vulnerability exists in the Management Server handling of Brocade Fabric OS versions before 10.0.1. A compromised switch…
• CVE-2026-87671 - CVSS 7.5 (high), 2026-10-08: An out-of-bounds memory read vulnerability exists in the web management daemon of Brocade Fabric OS versions before 10.0.1. Unauthenticated HTTP endpoints…
• CVE-2026-87684 - CVSS 9.8 (critical), 2026-10-08: A stack-based buffer overflow vulnerability exists in the SNMP daemon request handling of Brocade Fabric versions before 10.0.1. When processing an incoming…
• CVE-2026-87683 - CVSS 8.8 (high), 2026-10-08: Multiple stack-based buffer overflow vulnerabilities exist in the REST API management component of Brocade Fabric OS versions prior to 10.0.1. When processing…
• CVE-2026-87682 - CVSS 8.8 (high), 2026-10-08: Multiple OS Command Injection vulnerabilities exist in the management interface and session processing routines of Brocade Fabric OS versions before 10.0.1.…
• CVE-2026-87681 - CVSS 7.1 (high), 2026-10-08: An Access Control Bypass vulnerability exists in the Role-Based Access Control (RBAC) validation engine of Brocade Fabric OS versions before 10.0.1. When…
• CVE-2026-87680 - CVSS 8.8 (high), 2026-10-08: A command injection vulnerability in the REST API management interface of Brocade Fabric OS versions before 10.0.1 allows an authenticated user to execute…
• CVE-2026-87679 - CVSS 8.5 (high), 2026-10-08: When Brocade Fabric OS versions before 10.0.1 processes trunk configuration operations, the application parses user-supplied list strings into dynamically…
• CVE-2025-9711 - CVSS 8.5 (high), 2026-02-03: A vulnerability in Brocade Fabric OS before 9.2.1c3 could allow elevating the privileges of the local authenticated user to “root” using the export option of…
• CVE-2025-58381 - CVSS 4.6 (medium), 2026-02-03: A vulnerability in Brocade Fabric OS before 9.2.1c2 could allow an authenticated attacker with admin privileges using the shell commands “source, ping6,…
• CVE-2025-58380 - CVSS 4.6 (medium), 2026-02-03: A vulnerability in Brocade Fabric OS before 9.2.1 could allow an authenticated attacker with admin privileges using the shell command “grep” to modify the…
• CVE-2026-0383 - CVSS 8.2 (high), 2026-02-03: A vulnerability in Brocade Fabric OS could allow an authenticated, local attacker with privileges to access the Bash shell to access insecurely stored file…
• CVE-2025-58383 - CVSS 8.4 (high), 2026-02-03: A vulnerability in Brocade Fabric OS versions before 9.2.1c2 could allow an administrator-level user to execute the bind command, to escalate privileges and…
• CVE-2025-58382 - CVSS 8.5 (high), 2026-02-03: A vulnerability in the secure configuration of authentication and management services in Brocade Fabric OS before Fabric OS 9.2.1c2 could allow an…
• CVE-2025-58379 - CVSS 6 (medium), 2026-02-03: Brocade Fabric OS before 9.2.1 has a vulnerability that could allow a local authenticated attacker to reveal command line passwords using commands that may…
• CVE-2025-4661 - CVSS 4.8 (medium), 2025-06-19: A path transversal vulnerability in Brocade Fabric OS 9.1.0 through 9.2.2 could allow a local admin user to gain access to files outside the intended…
• CVE-2025-1976 - CVSS 8.6 (high), 2025-04-24: Brocade Fabric OS versions starting with 9.1.0 have root access removed, however, a local user with admin privilege can potentially execute arbitrary code…
• CVE-2024-7517 - CVSS 8.5 (high), 2024-11-21: A command injection vulnerability in Brocade Fabric OS before 9.2.0c, and 9.2.1 through 9.2.1a on IP extension platforms could allow a local authenticated…
• CVE-2024-10403 - CVSS 7.5 (high), 2024-11-21: Brocade Fabric OS versions before 8.2.3e2, versions 9.0.0 through 9.2.0c, and 9.2.1 through 9.2.1a can capture the SFTP/FTP server password used for a…
• CVE-2024-7516 - CVSS 7.1 (high), 2024-11-12: A vulnerability in Brocade Fabric OS versions before 9.2.2 could allow man-in-the-middle attackers to conduct remote Service Session Hijacking that may arise…
• CVE-2024-5460 - CVSS 8.1 (high), 2024-06-26: A vulnerability in the default configuration of the Simple Network Management Protocol (SNMP) feature of Brocade Fabric OS versions before v9.0.0 could allow…
• CVE-2024-29954 - CVSS 5.9 (medium), 2024-06-26: A vulnerability in a password management API in Brocade Fabric OS versions before v9.2.1, v9.2.0b, v9.1.1d, and v8.2.3e prints sensitive information in log…
• CVE-2024-29953 - CVSS 4.3 (medium), 2024-06-26: A vulnerability in the web interface in Brocade Fabric OS before v9.2.1, v9.2.0b, and v9.1.1d prints encoded session passwords on session storage for Virtual…
• CVE-2023-5973 - CVSS 4.3 (medium), 2024-04-05: Brocade Web Interface in Brocade Fabric OS v9.x and before v9.2.0 does not properly represent the portName to the user if the portName contains reserved…
• CVE-2023-3454 - CVSS 9.8 (critical), 2024-04-04: Remote code execution (RCE) vulnerability in Brocade Fabric OS after v9.0 and before v9.2.0 could allow an attacker to execute arbitrary code and use this to…
• CVE-2023-4162 - CVSS 4.4 (medium), 2023-08-31: A segmentation fault can occur in Brocade Fabric OS after Brocade Fabric OS v9.0 and before Brocade Fabric OS v9.2.0a through the passwdcfg command. This…
• CVE-2023-3489 - CVSS 8.6 (high), 2023-08-31: The firmwaredownload command on Brocade Fabric OS v9.2.0 could log the FTP/SFTP/SCP server password in clear text in the SupportSave file when performing a…
• CVE-2023-31926 - CVSS 7.1 (high), 2023-08-02: System files could be overwritten using the less command in Brocade Fabric OS before Brocade Fabric OS v9.1.1c and v9.2.0.
• CVE-2023-31927 - CVSS 5.3 (medium), 2023-08-02: An information disclosure in the web interface of Brocade Fabric OS versions before Brocade Fabric OS v9.2.0 and v9.1.1c, could allow a remote unauthenticated…
• CVE-2023-31431 - CVSS 5.5 (medium), 2023-08-02: A buffer overflow vulnerability in “diagstatus” command in Brocade Fabric OS before Brocade Fabric v9.2.0 and v9.1.1c could allow an authenticated user to…
• CVE-2023-31928 - CVSS 6.3 (medium), 2023-08-02: A reflected cross-site scripting (XSS) vulnerability exists in Brocade Webtools PortSetting.html of Brocade Fabric OS version before Brocade Fabric OS v9.2.0…
• CVE-2023-31432 - CVSS 7.8 (high), 2023-08-02: Through manipulation of passwords or other variables, using commands such as portcfgupload, configupload, license, myid, a non-privileged user could obtain…
• CVE-2023-31428 - CVSS 5.5 (medium), 2023-08-02: Brocade Fabric OS before Brocade Fabric OS v9.1.1c, v9.2.0 contains a vulnerability in the command line that could allow a local user to dump files under…
• CVE-2023-31427 - CVSS 7.8 (high), 2023-08-01: Brocade Fabric OS versions before Brocade Fabric OS v9.1.1c, and v9.2.0 Could allow an authenticated, local user with knowledge of full path names inside…
• CVE-2023-31429 - CVSS 5.5 (medium), 2023-08-01: Brocade Fabric OS before Brocade Fabric OS 9.1.1c, 9.2.0 contains a vulnerability when using various commands such as “chassisdistribute”, “reboot”, “rasman”,…
• CVE-2023-31425 - CVSS 7.8 (high), 2023-08-01: A vulnerability in the fosexec command of Brocade Fabric OS after Brocade Fabric OS v9.1.0 and, before Brocade Fabric OS v9.1.1 could allow a local…
• CVE-2017-6225 - CVSS 6.1 (medium), 2018-02-08: Cross-site scripting (XSS) vulnerability in the web-based management interface of Brocade Fibre Channel SAN products running Brocade Fabric OS (FOS) versions…
• CVE-2017-6227 - CVSS 6.5 (medium), 2018-02-08: A vulnerability in the IPv6 stack on Brocade Fibre Channel SAN products running Brocade Fabric OS (FOS) versions before 7.4.2b, 8.1.2 and 8.2.0 could allow an…