FO
Product
Fabric Operating System
On CISA KEVExploited in the wild
146
CVEs
2
On KEV
9.8
Max CVSS
43
New 30D
Severity mix
Critical 11High 68Medium 60Low 6
Watch
Add Fabric Operating System to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-22555 In wildKEV | 7.8 | Jul 7 | Heap Out-Of-Bounds Write in Netfilter IP6T_SO_SET_REPLACE Affected: All versions, or not specified |
| CVE-2026-94585 | 8.8 | Oct 8 | An authentication bypass vulnerability exists in the web management interface of Brocade Fabric OS versions before 9.2.2d running on the MXG610 platform Affected: before 9.2.2d |
| CVE-2026-94578 | 8.8 | Oct 8 | Brocade Fabric OS versions before 10.0.1 contain an authorization logic vulnerability in the AAA (Authentication, Authorization, and Accounting) integration framework allows… Affected: before 10.0.1 |
| CVE-2026-87683 | 8.8 | Oct 8 | Multiple stack-based buffer overflow vulnerabilities exist in the REST API management component of Brocade Fabric OS versions prior to 10.0.1 Affected: before 10.0.1 |
| CVE-2026-87682 | 8.8 | Oct 8 | Multiple OS Command Injection vulnerabilities exist in the management interface and session processing routines of Brocade Fabric OS versions before 10.0.1 Affected: before 10.0.1 |
| CVE-2026-87680 | 8.8 | Oct 8 | A command injection vulnerability in the REST API management interface of Brocade Fabric OS versions before 10.0.1 allows an authenticated user to execute arbitrary system… Affected: before 10.0.1 |
| CVE-2022-33183 | 8.8 | Oct 25 | A vulnerability in Brocade Fabric OS CLI before Brocade Fabric OS v9.1.0, 9.0.1e, 8.2.3c, 8.2.0cbn5, 7.4.2.j could allow a remote authenticated attacker to perform stack buffer… Affected: before 7.4.2.j; 8.0.0 before 8.2.3c; 9.0.0 before 9.0.1e |
| CVE-2022-28169 | 8.8 | Oct 25 | Brocade Webtools in Brocade Fabric OS versions before Brocade Fabric OS versions v9.1.1, v9.0.1e, and v8.2.3c could allow a low privilege webtools, user, to gain elevated admin… Affected: 8.0.0 before 8.2.3c; 9.0.0 before 9.0.1e; 9.1.0 before 9.1.1 |
| CVE-2022-33179 | 8.8 | Oct 25 | A vulnerability in Brocade Fabric OS CLI before Brocade Fabric OS v9.1.0, 9.0.1e, 8.2.3c, and 7.4.2j could allow a local authenticated user to break out of restricted shells with… Affected: before 7.4.2j; 8.0.0 before 8.2.3c; 9.0.0 before 9.0.1e; 9.1.0 |
| CVE-2020-15369 | 8.8 | Sep 25 | Supportlink CLI in Brocade Fabric OS Versions v8.2.1 through v8.2.1d, and 8.2.2 versions before v8.2.2c does not obfuscate the password field, which could expose users’… Affected: 8.2.1; 8.2.1a; 8.2.1b; 8.2.1c; 8.2.1d; 8.2.2; +3 more |
| CVE-2018-6442 | 8.8 | Nov 8 | A vulnerability in the Brocade Webtools firmware update section of Brocade Fabric OS before 8.2.1, 8.1.2f, 8.0.2f, 7.4.2d could allow remote authenticated attackers to execute… Affected: 7.4.2 before 7.4.2d; 8.0.2 before 8.0.2f; 8.1.2 before 8.1.2f; 8.2.0 before 8.2.1 |
| CVE-2016-8202 | 8.8 | May 8 | A privilege escalation vulnerability in Brocade Fibre Channel SAN products running Brocade Fabric OS (FOS) releases earlier than v7.4.1d and v8.0.1b could allow an authenticated… Affected: through 7.4.1c; 8.0.1 |
| CVE-2024-5460 | 8.1 | Jun 26 | A vulnerability in the default configuration of the Simple Network Management Protocol (SNMP) feature of Brocade Fabric OS versions before v9.0.0 could allow an authenticated,… Affected: before 9.0.0 |
| CVE-2021-27795 | 8.1 | Dec 6 | Brocade Fabric OS (FOS) hardware platforms running any version of Brocade Fabric OS software, which supports the license string format; contain cryptographic issues that could… Affected: All versions, or not specified |
| CVE-2022-22576 | 8.1 | May 26 | An improper authentication vulnerability exists in curl 7.33.0 to and including 7.82.0 which might allow reuse OAUTH2-authenticated connections without properly making sure that… Affected: All versions, or not specified |
| CVE-2026-94579 | 8.0 | Oct 8 | An OS command injection vulnerability exists in the PAM (Pluggable Authentication Module) session cleanup routines during SSH session termination on Brocade Fabric OS versions… Affected: before 9.2.2d; 10.0.0 before 10.0.1 |
| CVE-2026-94576 | 8.0 | Oct 8 | An authentication logic and privilege escalation vulnerability exists in the account management interface of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 Affected: before 9.2.2d; 10.0.0 before 10.0.1 |
| CVE-2026-87666 | 8.0 | Oct 8 | An OS command injection vulnerability exists in the time and zone management subsystem of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 Affected: before 9.2.2d; 10.0.0 before 10.0.1 |
| CVE-2024-5461 | 8.0 | Feb 15 | Implementation of the Simple Network Management Protocol (SNMP) operating on the Brocade 6547 (FC5022) embedded switch blade, makes internal script calls to system.sh from … Affected: before 8.2.3e1 |
| CVE-2026-94577 | 7.8 | Oct 8 | A privilege escalation vulnerability exists in the internal Command-Line Interface (CLI) authorization handling mechanism of Brocade Fabric OS versions before 9.2.2d and 10.0.0… Affected: before 9.2.2d; 10.0.0 before 10.0.1 |
| CVE-2026-87664 | 7.8 | Oct 8 | A session context forgery vulnerability exists in the web management daemon of Brocade Fabric OS versions 9.2.2d and 10.0.0 through 10.0.0a1 Affected: before 9.2.2d; 10.0.0 before 10.0.1 |
| CVE-2026-87674 | 7.8 | Oct 8 | A local privilege escalation vulnerability exists in the system logging daemon of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 Affected: before 9.2.2d; 10.0.0 before 10.0.1 |
| CVE-2026-94582 | 7.8 | Oct 8 | A memory buffer overflow vulnerability exists in the internal diagnostic and route validation routines used by the Fabric Shortest Path First (FSPF) protocol component of Brocade… Affected: before 10.0.1 |
| CVE-2025-9711 | 7.8 | Feb 3 | Privilege escalation in Brocade Fabric OS before 9.2.1c3, and 9.2.2 though 9.2.2b Affected: before 9.2.1c3; 9.2.2 before 9.2.2c |
| CVE-2026-0383 | 7.8 | Feb 3 | Information disclosure in Brocade Fabric OS before 9.2.1c2, 9.2.2 through 9.2.2a and 10.0.0 Affected: before 9.2.1c2; 9.2.2 before 9.2.2b; 10.0.0 |
| CVE-2024-7517 | 7.8 | Nov 21 | A command injection vulnerability in Brocade Fabric OS before 9.2.0c, and 9.2.1 through 9.2.1a on IP extension platforms could allow a local authenticated attacker to perform a… Affected: through 9.2.0c; 9.2.1 through 9.2.1a |
| CVE-2023-31427 | 7.8 | Aug 1 | Brocade Fabric OS versions before Brocade Fabric OS v9.1.1c, and v9.2.0 Could allow an authenticated, local user with knowledge of full path names inside Brocade Fabric OS to… Affected: before 9.1.1c |
| CVE-2023-31425 | 7.8 | Aug 1 | A vulnerability in the fosexec command of Brocade Fabric OS after Brocade Fabric OS v9.1.0 and, before Brocade Fabric OS v9.1.1 could allow a local authenticated user to perform… Affected: 9.1.0 |
| CVE-2022-33185 | 7.8 | Oct 25 | Several commands in Brocade Fabric OS before Brocade Fabric OS v.9.0.1e, and v9.1.0 use unsafe string functions to process user input Affected: before 9.0.1e |
| CVE-2022-33182 | 7.8 | Oct 25 | A privilege escalation vulnerability in Brocade Fabric OS CLI before Brocade Fabric OS v9.1.0, 9.0.1e, 8.2.3c, 8.2.0cbn5, could allow a local authenticated user to escalate its… Affected: 8.0.0 before 8.2.3c; 9.0.0 before 9.0.1e |
| CVE-2022-33184 | 7.8 | Oct 25 | A vulnerability in fab_seg.c.h libraries of all Brocade Fabric OS versions before Brocade Fabric OS v9.1.1, v9.0.1e, v8.2.3c, v8.2.0_cbn5, 7.4.2j could allow local authenticated… Affected: before 7.4.2.j; 8.0.0 before 8.2.3c; 9.0.0 before 9.0.1e |
| CVE-2021-27794 | 7.8 | Aug 12 | A vulnerability in the authentication mechanism of Brocade Fabric OS versions before Brocade Fabric OS v.9.0.1a, v8.2.3a and v7.4.2h could allow a user to Login with empty… Affected: before 7.4.2h; 8.0.0 before 8.2.3a; 9.0.0 before 9.0.1a |
| CVE-2021-27792 | 7.8 | Aug 12 | The request handling functions in web management interface of Brocade Fabric OS versions before v9.0.1a, v8.2.3a, and v7.4.2h do not properly handle malformed user input,… Affected: before 7.4.2h; 8.0.0 before 8.2.3a; 9.0.0 before 9.0.1a |
| CVE-2021-27790 | 7.8 | Aug 12 | The command ipfilter in Brocade Fabric OS before Brocade Fabric OS v.9.0.1a, v8.2.3, and v8.2.0_CBN4, and v7.4.2h uses unsafe string function to process user input Affected: before 7.4.2h; 8.0.0 before 8.2.0_cbn4; 8.2.1 before 8.2.3; 9.0.0 before 9.0.1a |
| CVE-2020-29661 | 7.8 | Dec 9 | A locking issue was discovered in the tty subsystem of the Linux kernel through 5.9.13 Affected: All versions, or not specified |
| CVE-2018-6439 | 7.8 | Dec 3 | A Vulnerability in the configdownload command of Brocade Fabric OS command line interface (CLI) versions before 8.2.1, 8.1.2f, 8.0.2f, 7.4.2d could allow a local attacker to… Affected: 7.4.2 before 7.4.2d; 8.0.2 before 8.0.2f; 8.1.2 before 8.1.2f; 8.2.0 before 8.2.1 |
| CVE-2018-6438 | 7.8 | Nov 8 | A Vulnerability in the supportsave command of Brocade Fabric OS command line interface (CLI) versions before 8.2.1, 8.1.2f, 8.0.2f, 7.4.2d could allow a local attacker to escape… Affected: 7.4.2 before 7.4.2d; 8.0.2 before 8.0.2f; 8.1.2 before 8.1.2f; 8.2.0 before 8.2.1 |
| CVE-2018-6437 | 7.8 | Nov 8 | A Vulnerability in the help command of Brocade Fabric OS command line interface (CLI) versions before 8.2.1, 8.1.2f, 8.0.2f, 7.4.2d could allow a local attacker to escape the… Affected: 7.4.2 before 7.4.2d; 8.0.2 before 8.0.2f; 8.1.2 before 8.1.2f; 8.2.0 before 8.2.1 |
| CVE-2018-6436 | 7.8 | Nov 8 | A Vulnerability in the firmwaredownload command of Brocade Fabric OS command line interface (CLI) versions before 8.2.1, 8.1.2f, 8.0.2f, 7.4.2d could allow a local attacker to… Affected: 7.4.2 before 7.4.2d; 8.0.2 before 8.0.2f; 8.1.2 before 8.1.2f; 8.2.0 before 8.2.1 |
| CVE-2018-6441 | 7.8 | Nov 8 | A vulnerability in Secure Shell implementation of Brocade Fabric OS versions before 8.2.1, 8.1.2f, 8.0.2f, 7.4.2d could allow a local attacker to provide arbitrary environment… Affected: 7.4.2 before 7.4.2d; 8.0.2 before 8.0.2f; 8.1.2 before 8.1.2f; 8.2.0 before 8.2.1 |
| CVE-2018-6435 | 7.8 | Nov 8 | A Vulnerability in the secryptocfg command of Brocade Fabric OS command line interface (CLI) versions before 8.2.1, 8.1.2f, 8.0.2f, 7.4.2d could allow a local attacker to escape… Affected: 7.4.2 before 7.4.2d; 8.0.2 before 8.0.2f; 8.1.2 before 8.1.2f; 8.2.0 before 8.2.1 |
| CVE-2026-87665 | 7.5 | Oct 8 | A stack-based buffer overflow vulnerability exists in the Internet Key Exchange (IKEv2) protocol handler on Brocade Fabric OS versions before 10.0.1 Affected: before 10.0.1 |
| CVE-2026-87671 | 7.5 | Oct 8 | An out-of-bounds memory read vulnerability exists in the web management daemon of Brocade Fabric OS versions before 10.0.1 Affected: before 10.0.1 |
| CVE-2024-5462 | 7.5 | Feb 15 | If Brocade Fabric OS before Fabric OS 9.2.0 configuration settings are not set to encrypt SNMP passwords, then the SNMP privsecret / authsecret fields can be exposed in plaintext Affected: before 9.2.0 |
| CVE-2024-10403 | 7.5 | Nov 21 | Brocade Fabric OS versions before 8.2.3e2, versions 9.0.0 through 9.2.0c, and 9.2.1 through 9.2.1a can capture the SFTP/FTP server password used for a firmware download … Affected: before 9.2.0c1; 9.2.1 before 9.2.1a1 |
| CVE-2023-3489 | 7.5 | Aug 31 | The firmwaredownload command on Brocade Fabric OS v9.2.0 could log the FTP/SFTP/SCP server password in clear text in the SupportSave file when performing a downgrade from… Affected: 9.2.0 |
| CVE-2022-27775 | 7.5 | Jun 1 | An information disclosure vulnerability exists in curl 7.65.0 to 7.82.0 are vulnerable that by using an IPv6 address that was in the connection pool but with a different zone id… Affected: All versions, or not specified |
| CVE-2020-15383 | 7.5 | Jun 9 | Running security scans against the SAN switch can cause config and secnotify processes within the firmware before Brocade Fabric OS v9.0.0, v8.2.2d and v8.2.1e to consume all… Affected: before 8.2.1; 8.2.1; 8.2.1a; 8.2.1b; 8.2.1c; 8.2.1d; +3 more |
| CVE-2018-6448 | 7.5 | Sep 25 | A vulnerability in the management interface in Brocade Fabric OS Versions before Brocade Fabric OS v9.0.0 could allow a remote attacker to perform a denial of service attack on… Affected: before 9.0.0 |
| CVE-2020-1967 | 7.5 | Apr 21 | Segmentation fault in SSL_check_chain Affected: All versions, or not specified |