FO
Product
Fabric Operating System
by Broadcom · last CVE Oct 8, 2026
On CISA KEVExploited in the wild
146
CVEs
2
On KEV
9.8
Max CVSS
43
New 30D
Severity mix
Critical 11High 68Medium 60Low 6
Watch

Add Fabric Operating System to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-87659
9.8
0%
Oct 8
A critical authorization bypass vulnerability exists in the Management Server handling of Brocade Fabric OS versions before 10.0.1
Affected: before 10.0.1
CVE-2026-87684
9.8
1%
Oct 8
A stack-based buffer overflow vulnerability exists in the SNMP daemon request handling of Brocade Fabric versions before 10.0.1
Affected: before 10.0.1
CVE-2023-3454
9.8
1%
Apr 4
Remote code execution (RCE) vulnerability in Brocade Fabric OS after v9.0 and before v9.2.0 could allow an attacker to execute arbitrary code and use this to gain root access to…
Affected: 9.0.0 before 9.1.1d1
CVE-2022-33186
9.8
2%
Dec 8
A vulnerability in Brocade Fabric OS software v9.1.1, v9.0.1e, v8.2.3c, v7.4.2j, and earlier versions could allow a remote unauthenticated attacker to execute on a Brocade Fabric…
Affected: 7.4.2j; 8.2.3c; 9.0.1e; 9.1.1
CVE-2021-27797
9.8
1%
Feb 21
Brocade Fabric OS before Brocade Fabric OS v8.2.1c, v8.1.2h, and all versions of Brocade Fabric OS v8.0.x and v7.x contain documented hard-coded credentials, which could allow…
Affected: 7.0.0 through 7.4.2h; 8.0.0 through 8.0.2f; 8.1.2 before 8.1.2h; 8.2.1 before 8.2.1c
CVE-2020-15374
9.8
1%
Sep 25
Rest API in Brocade Fabric OS v8.2.1 through v8.2.1d, and 8.2.2 versions before v8.2.2c is vulnerable to multiple instances of reflected input
Affected: 8.2.1; 8.2.1a; 8.2.1b; 8.2.1c; 8.2.1d; 8.2.2; +4 more
CVE-2020-15373
9.8
2%
Sep 25
Multiple buffer overflow vulnerabilities in REST API in Brocade Fabric OS versions v8.2.1 through v8.2.1d, and 8.2.2 versions before v8.2.2c could allow remote unauthenticated…
Affected: 8.2.1; 8.2.1a; 8.2.1b; 8.2.1c; 8.2.1d; 8.2.2; +4 more
CVE-2020-15371
9.8
1%
Sep 25
Brocade Fabric OS versions before Brocade Fabric OS v9.0.0, v8.2.2c, v8.2.1e, v8.1.2k, v8.2.0_CBN3, contains code injection and privilege escalation vulnerability
Affected: 8.0.0; 8.0.1; 8.0.1a; 8.0.1b; 8.0.2; 8.0.2a; +29 more
CVE-2019-18805
9.8
3%
Nov 7
An issue was discovered in net/ipv4/sysctl_net_ipv4.c in the Linux kernel before 5.0.11
Affected: All versions, or not specified
CVE-2018-6440
9.1
2%
Dec 3
A vulnerability in the proxy service of Brocade Fabric OS versions before 8.2.1, 8.1.2f, 8.0.2f, 7.4.2d could allow remote unauthenticated attackers to obtain sensitive…
Affected: 7.4.2 before 7.4.2d; 8.0.2 before 8.0.2f; 8.1.2 before 8.1.2f; 8.2.0 before 8.2.1
CVE-2024-3596
9.0
15%
Jul 9
RADIUS Protocol under RFC2865 is vulnerable to forgery attacks.
Affected: All versions, or not specified
Showing 11