FO
Product
Fabric Operating System
On CISA KEVExploited in the wild
146
CVEs
2
On KEV
9.8
Max CVSS
43
New 30D
Severity mix
Critical 11High 68Medium 60Low 6
Watch
Add Fabric Operating System to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-22555 In wildKEV | 7.8 | Jul 7 | Heap Out-Of-Bounds Write in Netfilter IP6T_SO_SET_REPLACE Affected: All versions, or not specified |
| CVE-2025-1976 In wildKEV | 6.7 | Apr 24 | Code injection exposure in Fabric OS 9.1.0 through 9.1.1d6 Affected: 9.1.0 before 9.1.1d7 |
| CVE-2026-87659 | 9.8 | Oct 8 | A critical authorization bypass vulnerability exists in the Management Server handling of Brocade Fabric OS versions before 10.0.1 Affected: before 10.0.1 |
| CVE-2026-87684 | 9.8 | Oct 8 | A stack-based buffer overflow vulnerability exists in the SNMP daemon request handling of Brocade Fabric versions before 10.0.1 Affected: before 10.0.1 |
| CVE-2023-3454 | 9.8 | Apr 4 | Remote code execution (RCE) vulnerability in Brocade Fabric OS after v9.0 and before v9.2.0 could allow an attacker to execute arbitrary code and use this to gain root access to… Affected: 9.0.0 before 9.1.1d1 |
| CVE-2022-33186 | 9.8 | Dec 8 | A vulnerability in Brocade Fabric OS software v9.1.1, v9.0.1e, v8.2.3c, v7.4.2j, and earlier versions could allow a remote unauthenticated attacker to execute on a Brocade Fabric… Affected: 7.4.2j; 8.2.3c; 9.0.1e; 9.1.1 |
| CVE-2021-27797 | 9.8 | Feb 21 | Brocade Fabric OS before Brocade Fabric OS v8.2.1c, v8.1.2h, and all versions of Brocade Fabric OS v8.0.x and v7.x contain documented hard-coded credentials, which could allow… Affected: 7.0.0 through 7.4.2h; 8.0.0 through 8.0.2f; 8.1.2 before 8.1.2h; 8.2.1 before 8.2.1c |
| CVE-2020-15374 | 9.8 | Sep 25 | Rest API in Brocade Fabric OS v8.2.1 through v8.2.1d, and 8.2.2 versions before v8.2.2c is vulnerable to multiple instances of reflected input Affected: 8.2.1; 8.2.1a; 8.2.1b; 8.2.1c; 8.2.1d; 8.2.2; +4 more |
| CVE-2020-15373 | 9.8 | Sep 25 | Multiple buffer overflow vulnerabilities in REST API in Brocade Fabric OS versions v8.2.1 through v8.2.1d, and 8.2.2 versions before v8.2.2c could allow remote unauthenticated… Affected: 8.2.1; 8.2.1a; 8.2.1b; 8.2.1c; 8.2.1d; 8.2.2; +4 more |
| CVE-2020-15371 | 9.8 | Sep 25 | Brocade Fabric OS versions before Brocade Fabric OS v9.0.0, v8.2.2c, v8.2.1e, v8.1.2k, v8.2.0_CBN3, contains code injection and privilege escalation vulnerability Affected: 8.0.0; 8.0.1; 8.0.1a; 8.0.1b; 8.0.2; 8.0.2a; +29 more |
| CVE-2019-18805 | 9.8 | Nov 7 | An issue was discovered in net/ipv4/sysctl_net_ipv4.c in the Linux kernel before 5.0.11 Affected: All versions, or not specified |
| CVE-2018-6440 | 9.1 | Dec 3 | A vulnerability in the proxy service of Brocade Fabric OS versions before 8.2.1, 8.1.2f, 8.0.2f, 7.4.2d could allow remote unauthenticated attackers to obtain sensitive… Affected: 7.4.2 before 7.4.2d; 8.0.2 before 8.0.2f; 8.1.2 before 8.1.2f; 8.2.0 before 8.2.1 |
| CVE-2024-3596 | 9.0 | Jul 9 | RADIUS Protocol under RFC2865 is vulnerable to forgery attacks. Affected: All versions, or not specified |
| CVE-2026-94585 | 8.8 | Oct 8 | An authentication bypass vulnerability exists in the web management interface of Brocade Fabric OS versions before 9.2.2d running on the MXG610 platform Affected: before 9.2.2d |
| CVE-2026-94578 | 8.8 | Oct 8 | Brocade Fabric OS versions before 10.0.1 contain an authorization logic vulnerability in the AAA (Authentication, Authorization, and Accounting) integration framework allows… Affected: before 10.0.1 |
| CVE-2026-87683 | 8.8 | Oct 8 | Multiple stack-based buffer overflow vulnerabilities exist in the REST API management component of Brocade Fabric OS versions prior to 10.0.1 Affected: before 10.0.1 |
| CVE-2026-87682 | 8.8 | Oct 8 | Multiple OS Command Injection vulnerabilities exist in the management interface and session processing routines of Brocade Fabric OS versions before 10.0.1 Affected: before 10.0.1 |
| CVE-2026-87680 | 8.8 | Oct 8 | A command injection vulnerability in the REST API management interface of Brocade Fabric OS versions before 10.0.1 allows an authenticated user to execute arbitrary system… Affected: before 10.0.1 |
| CVE-2022-33183 | 8.8 | Oct 25 | A vulnerability in Brocade Fabric OS CLI before Brocade Fabric OS v9.1.0, 9.0.1e, 8.2.3c, 8.2.0cbn5, 7.4.2.j could allow a remote authenticated attacker to perform stack buffer… Affected: before 7.4.2.j; 8.0.0 before 8.2.3c; 9.0.0 before 9.0.1e |
| CVE-2022-28169 | 8.8 | Oct 25 | Brocade Webtools in Brocade Fabric OS versions before Brocade Fabric OS versions v9.1.1, v9.0.1e, and v8.2.3c could allow a low privilege webtools, user, to gain elevated admin… Affected: 8.0.0 before 8.2.3c; 9.0.0 before 9.0.1e; 9.1.0 before 9.1.1 |
| CVE-2022-33179 | 8.8 | Oct 25 | A vulnerability in Brocade Fabric OS CLI before Brocade Fabric OS v9.1.0, 9.0.1e, 8.2.3c, and 7.4.2j could allow a local authenticated user to break out of restricted shells with… Affected: before 7.4.2j; 8.0.0 before 8.2.3c; 9.0.0 before 9.0.1e; 9.1.0 |
| CVE-2020-15369 | 8.8 | Sep 25 | Supportlink CLI in Brocade Fabric OS Versions v8.2.1 through v8.2.1d, and 8.2.2 versions before v8.2.2c does not obfuscate the password field, which could expose users’… Affected: 8.2.1; 8.2.1a; 8.2.1b; 8.2.1c; 8.2.1d; 8.2.2; +3 more |
| CVE-2018-6442 | 8.8 | Nov 8 | A vulnerability in the Brocade Webtools firmware update section of Brocade Fabric OS before 8.2.1, 8.1.2f, 8.0.2f, 7.4.2d could allow remote authenticated attackers to execute… Affected: 7.4.2 before 7.4.2d; 8.0.2 before 8.0.2f; 8.1.2 before 8.1.2f; 8.2.0 before 8.2.1 |
| CVE-2016-8202 | 8.8 | May 8 | A privilege escalation vulnerability in Brocade Fibre Channel SAN products running Brocade Fabric OS (FOS) releases earlier than v7.4.1d and v8.0.1b could allow an authenticated… Affected: through 7.4.1c; 8.0.1 |
| CVE-2024-5460 | 8.1 | Jun 26 | A vulnerability in the default configuration of the Simple Network Management Protocol (SNMP) feature of Brocade Fabric OS versions before v9.0.0 could allow an authenticated,… Affected: before 9.0.0 |
| CVE-2021-27795 | 8.1 | Dec 6 | Brocade Fabric OS (FOS) hardware platforms running any version of Brocade Fabric OS software, which supports the license string format; contain cryptographic issues that could… Affected: All versions, or not specified |
| CVE-2022-22576 | 8.1 | May 26 | An improper authentication vulnerability exists in curl 7.33.0 to and including 7.82.0 which might allow reuse OAUTH2-authenticated connections without properly making sure that… Affected: All versions, or not specified |
| CVE-2026-94579 | 8.0 | Oct 8 | An OS command injection vulnerability exists in the PAM (Pluggable Authentication Module) session cleanup routines during SSH session termination on Brocade Fabric OS versions… Affected: before 9.2.2d; 10.0.0 before 10.0.1 |
| CVE-2026-94576 | 8.0 | Oct 8 | An authentication logic and privilege escalation vulnerability exists in the account management interface of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 Affected: before 9.2.2d; 10.0.0 before 10.0.1 |
| CVE-2026-87666 | 8.0 | Oct 8 | An OS command injection vulnerability exists in the time and zone management subsystem of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 Affected: before 9.2.2d; 10.0.0 before 10.0.1 |
| CVE-2024-5461 | 8.0 | Feb 15 | Implementation of the Simple Network Management Protocol (SNMP) operating on the Brocade 6547 (FC5022) embedded switch blade, makes internal script calls to system.sh from … Affected: before 8.2.3e1 |
| CVE-2026-94577 | 7.8 | Oct 8 | A privilege escalation vulnerability exists in the internal Command-Line Interface (CLI) authorization handling mechanism of Brocade Fabric OS versions before 9.2.2d and 10.0.0… Affected: before 9.2.2d; 10.0.0 before 10.0.1 |
| CVE-2026-87664 | 7.8 | Oct 8 | A session context forgery vulnerability exists in the web management daemon of Brocade Fabric OS versions 9.2.2d and 10.0.0 through 10.0.0a1 Affected: before 9.2.2d; 10.0.0 before 10.0.1 |
| CVE-2026-87674 | 7.8 | Oct 8 | A local privilege escalation vulnerability exists in the system logging daemon of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 Affected: before 9.2.2d; 10.0.0 before 10.0.1 |
| CVE-2026-94582 | 7.8 | Oct 8 | A memory buffer overflow vulnerability exists in the internal diagnostic and route validation routines used by the Fabric Shortest Path First (FSPF) protocol component of Brocade… Affected: before 10.0.1 |
| CVE-2025-9711 | 7.8 | Feb 3 | Privilege escalation in Brocade Fabric OS before 9.2.1c3, and 9.2.2 though 9.2.2b Affected: before 9.2.1c3; 9.2.2 before 9.2.2c |
| CVE-2026-0383 | 7.8 | Feb 3 | Information disclosure in Brocade Fabric OS before 9.2.1c2, 9.2.2 through 9.2.2a and 10.0.0 Affected: before 9.2.1c2; 9.2.2 before 9.2.2b; 10.0.0 |
| CVE-2024-7517 | 7.8 | Nov 21 | A command injection vulnerability in Brocade Fabric OS before 9.2.0c, and 9.2.1 through 9.2.1a on IP extension platforms could allow a local authenticated attacker to perform a… Affected: through 9.2.0c; 9.2.1 through 9.2.1a |
| CVE-2023-31427 | 7.8 | Aug 1 | Brocade Fabric OS versions before Brocade Fabric OS v9.1.1c, and v9.2.0 Could allow an authenticated, local user with knowledge of full path names inside Brocade Fabric OS to… Affected: before 9.1.1c |
| CVE-2023-31425 | 7.8 | Aug 1 | A vulnerability in the fosexec command of Brocade Fabric OS after Brocade Fabric OS v9.1.0 and, before Brocade Fabric OS v9.1.1 could allow a local authenticated user to perform… Affected: 9.1.0 |
| CVE-2022-33185 | 7.8 | Oct 25 | Several commands in Brocade Fabric OS before Brocade Fabric OS v.9.0.1e, and v9.1.0 use unsafe string functions to process user input Affected: before 9.0.1e |
| CVE-2022-33182 | 7.8 | Oct 25 | A privilege escalation vulnerability in Brocade Fabric OS CLI before Brocade Fabric OS v9.1.0, 9.0.1e, 8.2.3c, 8.2.0cbn5, could allow a local authenticated user to escalate its… Affected: 8.0.0 before 8.2.3c; 9.0.0 before 9.0.1e |
| CVE-2022-33184 | 7.8 | Oct 25 | A vulnerability in fab_seg.c.h libraries of all Brocade Fabric OS versions before Brocade Fabric OS v9.1.1, v9.0.1e, v8.2.3c, v8.2.0_cbn5, 7.4.2j could allow local authenticated… Affected: before 7.4.2.j; 8.0.0 before 8.2.3c; 9.0.0 before 9.0.1e |
| CVE-2021-27794 | 7.8 | Aug 12 | A vulnerability in the authentication mechanism of Brocade Fabric OS versions before Brocade Fabric OS v.9.0.1a, v8.2.3a and v7.4.2h could allow a user to Login with empty… Affected: before 7.4.2h; 8.0.0 before 8.2.3a; 9.0.0 before 9.0.1a |
| CVE-2021-27792 | 7.8 | Aug 12 | The request handling functions in web management interface of Brocade Fabric OS versions before v9.0.1a, v8.2.3a, and v7.4.2h do not properly handle malformed user input,… Affected: before 7.4.2h; 8.0.0 before 8.2.3a; 9.0.0 before 9.0.1a |
| CVE-2021-27790 | 7.8 | Aug 12 | The command ipfilter in Brocade Fabric OS before Brocade Fabric OS v.9.0.1a, v8.2.3, and v8.2.0_CBN4, and v7.4.2h uses unsafe string function to process user input Affected: before 7.4.2h; 8.0.0 before 8.2.0_cbn4; 8.2.1 before 8.2.3; 9.0.0 before 9.0.1a |
| CVE-2020-29661 | 7.8 | Dec 9 | A locking issue was discovered in the tty subsystem of the Linux kernel through 5.9.13 Affected: All versions, or not specified |
| CVE-2018-6439 | 7.8 | Dec 3 | A Vulnerability in the configdownload command of Brocade Fabric OS command line interface (CLI) versions before 8.2.1, 8.1.2f, 8.0.2f, 7.4.2d could allow a local attacker to… Affected: 7.4.2 before 7.4.2d; 8.0.2 before 8.0.2f; 8.1.2 before 8.1.2f; 8.2.0 before 8.2.1 |
| CVE-2018-6438 | 7.8 | Nov 8 | A Vulnerability in the supportsave command of Brocade Fabric OS command line interface (CLI) versions before 8.2.1, 8.1.2f, 8.0.2f, 7.4.2d could allow a local attacker to escape… Affected: 7.4.2 before 7.4.2d; 8.0.2 before 8.0.2f; 8.1.2 before 8.1.2f; 8.2.0 before 8.2.1 |
| CVE-2018-6437 | 7.8 | Nov 8 | A Vulnerability in the help command of Brocade Fabric OS command line interface (CLI) versions before 8.2.1, 8.1.2f, 8.0.2f, 7.4.2d could allow a local attacker to escape the… Affected: 7.4.2 before 7.4.2d; 8.0.2 before 8.0.2f; 8.1.2 before 8.1.2f; 8.2.0 before 8.2.1 |