Brocade Fabric OS

• CVE-2025-1976 High 8.6 Exploited Code injection exposure in Fabric OS 9.1.0 through 9.1.1d6 0.7%
• CVE-2026-94585 High 7.7 An authentication bypass vulnerability exists in the web management interface of Brocade Fabric OS versions before 9.2.2d running on the MXG610 platform. An unauthenticated, network-adjacent attacker 0.2%
• CVE-2026-94587 Medium 6.9 A buffer overflow vulnerability exists in the WebTools administrative interface handling configuration download or file transfer operations of Brocade Fabric OS versions before 9.2.2d and 10.0.0 throu 0.2%
• CVE-2026-94579 Medium 5.4 An OS command injection vulnerability exists in the PAM (Pluggable Authentication Module) session cleanup routines during SSH session termination on Brocade Fabric OS versions before 9.2.2d and 10.0.0 3.1%
• CVE-2026-94576 Medium 5.9 An authentication logic and privilege escalation vulnerability exists in the account management interface of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. Under specific condit 0.4%
• CVE-2026-87661 Medium 6.8 Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 directly accepts Apache configuration file data during service setup or re-initialization. An attacker capable of corrupting the co 0.2%
• CVE-2026-87677 Medium 5.4 An OS command injection vulnerability exists in the account management subsystem of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. When an administrator initiates an account del 0.6%
• CVE-2026-94586 High 8.5 A command injection vulnerability exists in the WebTools administrative interface handling configuration download or file transfer operations of Brocade Fabric OS versions before 9.2.2d and 10.0.0 thr 1.4%
• CVE-2026-94581 High 8.5 An OS command injection vulnerability exists in the REST API management interface of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 allows an authenticated, high-privileged remot 1.5%
• CVE-2026-94577 High 7.3 A privilege escalation vulnerability exists in the internal Command-Line Interface (CLI) authorization handling mechanism of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. An au 0.1%
• CVE-2026-87664 High 8.5 A session context forgery vulnerability exists in the web management daemon of Brocade Fabric OS versions 9.2.2d and 10.0.0 through 10.0.0a1. When processing local inter-process communication (IPC) st 0.1%
• CVE-2026-87663 High 7.1 An authentication bypass and command injection vulnerability exists in the inter-switch remote execution service of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. When processin 0.7%
• CVE-2026-87662 High 7.0 Brocade Fabric versions before 9.2.2d and 10.0.0 through 10.0.0a1 handling of specific download protocols utilizes unsanitized parameter strings. When processing upgrade requests, parameters are conve 0.3%
• CVE-2026-87660 High 7.0 An improper file permission and missing authorization vulnerability exists in the diagnostic kernel module subsystem of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. An unprivi 0.1%
• CVE-2026-87667 High 8.4 An argument injection vulnerability exists in the configuration management command-line utility of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. When executing configuration vi 0.2%
• CVE-2026-87666 High 8.6 An OS command injection vulnerability exists in the time and zone management subsystem of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. When updating system timezone settings v 2.6%
• CVE-2026-87675 High 7.3 An OS command injection vulnerability exists in the configuration management subsystem of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. When performing a configuration download 0.7%
• CVE-2026-87674 High 8.5 A local privilege escalation vulnerability exists in the system logging daemon of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. Insufficient access controls on internal inter-p 0.1%
• CVE-2026-87673 High 7.0 An OS command injection vulnerability exists in maintenance command-line diagnostic utilities on Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. The binary fails to sanitize user 1.8%
• CVE-2026-87687 High 8.5 An authorization and input validation vulnerability exists in Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. An authenticated user with restricted privileges in one Virtual Fabr 0.2%
• CVE-2026-87685 High 8.4 An arbitrary file manipulation vulnerability exists in the WebTools management interface of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. When processing configuration transfer 0.2%
• CVE-2026-87688 High 8.5 An input validation vulnerability exists in the security certificate management component of the Brocade Fabric OS administrative management API. When processing certificate management operations, use 0.1%
• CVE-2026-94584 Low 2.1 A race condition and thread-safety vulnerability exists in the web management daemon of Brocade Fabric OS versions before 10.0.1. When handling user authentication requests across a multi-threaded exe 0.1%
• CVE-2026-94580 Medium 5.7 An arbitrary file and directory deletion vulnerability exists in the REST API management interface handling USB storage operations on Brocade Fabric OS versions before 10.0.1. An authenticated user po 0.2%
• CVE-2026-94575 Medium 6.9 A logic vulnerability in Brocade Fabric OS versions before 10.0.1 web management framework allows an authenticated, low-privileged user to bypass inner Role-Based Access Control (RBAC) checks under sp 0.2%
• CVE-2026-94583 Low 2.1 A race condition vulnerability exists in the request processing logic of the REST management interface on Brocade Fabric OS versions before 10.0.1. When handling concurrent incoming network management 0.1%
• CVE-2026-94582 Medium 6.8 A memory buffer overflow vulnerability exists in the internal diagnostic and route validation routines used by the Fabric Shortest Path First (FSPF) protocol component of Brocade Fabric OS versions be 0.1%
• CVE-2026-87668 Medium 6.9 A stack-based buffer overflow vulnerability exists in the diagnostic execution utility of Brocade Fabric OS versions before 10.0.1. When processing command arguments for diagnostic operations, the uti 0.4%
• CVE-2026-87665 Medium 6.0 A stack-based buffer overflow vulnerability exists in the Internet Key Exchange (IKEv2) protocol handler on Brocade Fabric OS versions before 10.0.1. The vulnerability occurs when processing initial I 0.8%
• CVE-2026-87672 Medium 6.8 An information disclosure vulnerability exists in the SupportLink diagnostic collection utilities of Brocade Fabric OS versions before 10.0.1. When SupportLink is configured to use an authenticated HT 0.1%
• CVE-2026-87670 Medium 5.1 An authorization logic vulnerability exists in the Brocade Fabric OS versions before 10.0.1 REST API gateway. The internal gate guarding restricted management endpoints relies exclusively on client-co 0.2%
• CVE-2026-87669 Medium 5.1 A missing authorization check in Brocade Fabric OS versions before 10.0.1 REST API interface of affected platform releases allows an authenticated user, regardless of their assigned role or administra 0.2%
• CVE-2026-87678 Medium 6.9 An input validation and output encoding vulnerability exists in the web management interface of Brocade Fabric OS versions before 10.0.1. When configuring Federated Authentication (FA), the system fai 0.2%
• CVE-2026-87676 Medium 6.9 A stack-based buffer overflow vulnerability exists in the security library component of Brocade Fabric OS versions before 10.0.1. When parsing uploaded X.509 PEM certificates for management display, t 0.1%
• CVE-2026-87686 Medium 5.3 An authentication and access control bypass vulnerability exists in the web server management interface of Brocade Fabric OS versions before 10.0.1. The web dispatcher routine evaluates internal manag 0.2%
• CVE-2026-94578 High 7.5 Brocade Fabric OS versions before 10.0.1 contain an authorization logic vulnerability in the AAA (Authentication, Authorization, and Accounting) integration framework allows remote authenticated users 0.4%
• CVE-2026-87659 High 7.1 A critical authorization bypass vulnerability exists in the Management Server handling of Brocade Fabric OS versions before 10.0.1. A compromised switch connected to the fabric can transmit crafted in 0.2%
• CVE-2026-87671 High 7.1 An out-of-bounds memory read vulnerability exists in the web management daemon of Brocade Fabric OS versions before 10.0.1. Unauthenticated HTTP endpoints process specific URL query parameters without 0.4%
• CVE-2026-87684 High 8.7 A stack-based buffer overflow vulnerability exists in the SNMP daemon request handling of Brocade Fabric versions before 10.0.1. When processing an incoming SNMPv3 packet, an internal statistics gathe 0.6%
• CVE-2026-87683 High 8.6 Multiple stack-based buffer overflow vulnerabilities exist in the REST API management component of Brocade Fabric OS versions prior to 10.0.1. When processing API request payloads (such as device conf 0.5%
• CVE-2026-87682 High 8.6 Multiple OS Command Injection vulnerabilities exist in the management interface and session processing routines of Brocade Fabric OS versions before 10.0.1. Input processing flaws during remote manage 1.7%
• CVE-2026-87681 High 7.1 An Access Control Bypass vulnerability exists in the Role-Based Access Control (RBAC) validation engine of Brocade Fabric OS versions before 10.0.1. When processing certain management protocol operati 0.2%
• CVE-2026-87680 High 8.5 A command injection vulnerability in the REST API management interface of Brocade Fabric OS versions before 10.0.1 allows an authenticated user to execute arbitrary system commands via crafted input p 1.9%
• CVE-2026-87679 High 8.5 When Brocade Fabric OS versions before 10.0.1 processes trunk configuration operations, the application parses user-supplied list strings into dynamically allocated heap arrays without enforcing bound 0.4%
• CVE-2025-58381 Medium 4.6 Directory transversal vulnerability in Brocade Fabric OS before 9.2.1c2 and 9.2.2 through 9.2.2a using various shell commands 0.2%
• CVE-2025-9711 High 8.5 Privilege escalation in Brocade Fabric OS before 9.2.1c3, and 9.2.2 though 9.2.2b 0.1%
• CVE-2025-58380 Medium 4.6 Directory transversal vulnerability in Brocade Fabric OS before 9.2.1 using grep command 0.2%
• CVE-2026-0383 High 8.2 Information disclosure in Brocade Fabric OS before 9.2.1c2, 9.2.2 through 9.2.2a and 10.0.0 0.2%
• CVE-2025-58379 Medium 6.0 Password Exposure in Brocade Fabric OS 0.2%
• CVE-2025-58383 High 8.4 Privilege escalation via bind command in Brocade Fabric OS 0.5%