CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 5,470 CVEs published, 357 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
5,470
Show in the list
Critical, last 7 days
357
Show in the list
Healthcare-tagged, last 7 days
4
Show in the list
Known exploited (CISA KEV)
1,747
Show in the list

Showing CVEs that name the product broadcom:fabric_operating_system. Show all products

66 CVEs, showing 1 to 50Page 1 of 2Next
CVESeverityTitlePublished
CVE-2020-1967High 7.5Segmentation fault in SSL_check_chain
Assigned by openssl
Apr 21, 2020
CVE-2020-13632Medium 5.5ext/fts3/fts3_snippet.c in SQLite before 3.32.0 has a NULL pointer dereference via a crafted matchinfo() query.
Assigned by mitre
May 27, 2020
CVE-2020-13631Medium 5.5SQLite before 3.32.0 allows a virtual table to be renamed to the name of one of its shadow tables, related to alter.c and build.c.
Assigned by mitre
May 27, 2020
CVE-2020-13630High 7.0ext/fts3/fts3.c in SQLite before 3.32.0 has a use-after-free in fts3EvalNextRow, related to the snippet feature.
Assigned by mitre
May 27, 2020
CVE-2020-15778High 7.8scp in OpenSSH through 8.3p1 allows command injection in the scp.c toremote function, as demonstrated by backtick characters in the destination argument.
Assigned by mitre
Jul 24, 2020
CVE-2019-25013Medium 5.9The iconv feature in the GNU C Library (aka glibc or libc6) through 2.32, when processing invalid multi-byte input sequences in the EUC-KR encoding, may have a buffer over-read.
Assigned by mitre
Jan 4, 2021
CVE-2021-22876Medium 5.3curl 7.1.1 to and including 7.75.0 is vulnerable to an "Exposure of Private Personal Information to an Unauthorized Actor" by leaking credentials in the HTTP Referer: header.
Assigned by hackerone
Apr 1, 2021
CVE-2021-22890Medium 4.3curl 7.63.0 to and including 7.75.0 includes vulnerability that allows a malicious HTTPS proxy to MITM a connection due to bad handling of TLS 1.3 session tickets.
Assigned by hackerone
Apr 1, 2021
CVE-2021-22555
Known exploited
High 8.3Heap Out-Of-Bounds Write in Netfilter IP6T_SO_SET_REPLACE
Assigned by Google
Jul 7, 2021
CVE-2022-22576High 8.1An improper authentication vulnerability exists in curl 7.33.0 to and including 7.82.0 which might allow reuse OAUTH2-authenticated connections without properly making sure that the connection was au…
Assigned by hackerone
May 26, 2022
CVE-2022-27776Medium 6.5A insufficiently protected credentials vulnerability in fixed in curl 7.83.0 might leak authentication or cookie header data on HTTP redirects to the same host but another port number.
Assigned by hackerone
Jun 1, 2022
CVE-2022-27775High 7.5An information disclosure vulnerability exists in curl 7.65.0 to 7.82.0 are vulnerable that by using an IPv6 address that was in the connection pool but with a different zone id it could reuse a conn…
Assigned by hackerone
Jun 1, 2022
CVE-2022-27774Medium 5.7An insufficiently protected credentials vulnerability exists in curl 4.9 to and include curl 7.82.0 are affected that could allow an attacker to extract credentials when follows HTTP(S) redirects is…
Assigned by hackerone
Jun 1, 2022
CVE-2022-33186Critical 9.8A vulnerability in Brocade Fabric OS software v9.1.1, v9.0.1e, v8.2.3c, v7.4.2j, and earlier versions could allow a remote unauthenticated attacker to execute on a Brocade Fabric OS switch commands c…Dec 8, 2022
CVE-2024-3596Critical 9.0RADIUS Protocol under RFC2865 is vulnerable to forgery attacks.
Assigned by certcc
Jul 9, 2024
CVE-2025-1976
Known exploited
High 8.6Code injection exposure in Fabric OS 9.1.0 through 9.1.1d6
Assigned by brocade
Apr 24, 2025
CVE-2025-58379Medium 5.5Brocade Fabric OS before 9.2.1 has a vulnerability that could allow a local authenticated attacker to reveal command line passwords using commands that may expose higher privilege sensitive informati…Feb 3, 2026
CVE-2025-58382High 7.2A vulnerability in the secure configuration of authentication and management services in Brocade Fabric OS before Fabric OS 9.2.1c2 could allow an authenticated, remote attacker with administrative c…Feb 3, 2026
CVE-2025-58383High 7.2A vulnerability in Brocade Fabric OS versions before 9.2.1c2 could allow an administrator-level user to execute the bind command, to escalate privileges and bypass security controls allowing the exec…Feb 3, 2026
CVE-2026-0383High 7.8A vulnerability in Brocade Fabric OS could allow an authenticated, local attacker with privileges to access the Bash shell to access insecurely stored file contents including the history command.Feb 3, 2026
CVE-2025-58380Low 2.3A vulnerability in Brocade Fabric OS before 9.2.1 could allow an authenticated attacker with admin privileges using the shell command “grep” to modify the path variables and move upwards in the direc…Feb 3, 2026
CVE-2025-58381Low 2.3A vulnerability in Brocade Fabric OS before 9.2.1c2 could allow an authenticated attacker with admin privileges using the shell commands “source, ping6, sleep, disown, wait to modify the path variabl…Feb 3, 2026
CVE-2025-9711High 7.8A vulnerability in Brocade Fabric OS before 9.2.1c3 could allow elevating the privileges of the local authenticated user to “root” using the export option of seccertmgmt and seccryptocfg commands.Feb 3, 2026
CVE-2026-87679High 8.5When Brocade Fabric OS versions before 10.0.1 processes trunk configuration operations, the application parses user-supplied list strings into dynamically allocated heap arrays without enforcing boun…
Assigned by brocade
Oct 8, 2026
CVE-2026-87680High 8.5A command injection vulnerability in the REST API management interface of Brocade Fabric OS versions before 10.0.1 allows an authenticated user to execute arbitrary system commands via crafted input…
Assigned by brocade
Oct 8, 2026
CVE-2026-87681High 7.1An Access Control Bypass vulnerability exists in the Role-Based Access Control (RBAC) validation engine of Brocade Fabric OS versions before 10.0.1.
Assigned by brocade
Oct 8, 2026
CVE-2026-87682High 8.6Multiple OS Command Injection vulnerabilities exist in the management interface and session processing routines of Brocade Fabric OS versions before 10.0.1.
Assigned by brocade
Oct 8, 2026
CVE-2026-87683High 8.6Multiple stack-based buffer overflow vulnerabilities exist in the REST API management component of Brocade Fabric OS versions prior to 10.0.1.
Assigned by brocade
Oct 8, 2026
CVE-2026-87684High 8.7A stack-based buffer overflow vulnerability exists in the SNMP daemon request handling of Brocade Fabric versions before 10.0.1.
Assigned by brocade
Oct 8, 2026
CVE-2026-87671High 7.1An out-of-bounds memory read vulnerability exists in the web management daemon of Brocade Fabric OS versions before 10.0.1.
Assigned by brocade
Oct 8, 2026
CVE-2026-87659High 7.1A critical authorization bypass vulnerability exists in the Management Server handling of Brocade Fabric OS versions before 10.0.1.
Assigned by brocade
Oct 8, 2026
CVE-2026-94578High 7.5Brocade Fabric OS versions before 10.0.1 contain an authorization logic vulnerability in the AAA (Authentication, Authorization, and Accounting) integration framework allows remote authenticated user…
Assigned by brocade
Oct 8, 2026
CVE-2026-87686Medium 5.3An authentication and access control bypass vulnerability exists in the web server management interface of Brocade Fabric OS versions before 10.0.1.
Assigned by brocade
Oct 8, 2026
CVE-2026-87676Medium 6.9A stack-based buffer overflow vulnerability exists in the security library component of Brocade Fabric OS versions before 10.0.1.
Assigned by brocade
Oct 8, 2026
CVE-2026-87678Medium 6.9An input validation and output encoding vulnerability exists in the web management interface of Brocade Fabric OS versions before 10.0.1.
Assigned by brocade
Oct 8, 2026
CVE-2026-87669Medium 5.1A missing authorization check in Brocade Fabric OS versions before 10.0.1 REST API interface of affected platform releases allows an authenticated user, regardless of their assigned role or administr…
Assigned by brocade
Oct 8, 2026
CVE-2026-87670Medium 5.1An authorization logic vulnerability exists in the Brocade Fabric OS versions before 10.0.1 REST API gateway.
Assigned by brocade
Oct 8, 2026
CVE-2026-87672Medium 6.8An information disclosure vulnerability exists in the SupportLink diagnostic collection utilities of Brocade Fabric OS versions before 10.0.1.
Assigned by brocade
Oct 8, 2026
CVE-2026-87665Medium 6.0A stack-based buffer overflow vulnerability exists in the Internet Key Exchange (IKEv2) protocol handler on Brocade Fabric OS versions before 10.0.1.
Assigned by brocade
Oct 8, 2026
CVE-2026-87668Medium 6.9A stack-based buffer overflow vulnerability exists in the diagnostic execution utility of Brocade Fabric OS versions before 10.0.1.
Assigned by brocade
Oct 8, 2026
CVE-2026-94582Medium 6.8A memory buffer overflow vulnerability exists in the internal diagnostic and route validation routines used by the Fabric Shortest Path First (FSPF) protocol component of Brocade Fabric OS versions b…
Assigned by brocade
Oct 8, 2026
CVE-2026-94583Low 2.1A race condition vulnerability exists in the request processing logic of the REST management interface on Brocade Fabric OS versions before 10.0.1.
Assigned by brocade
Oct 8, 2026
CVE-2026-94575Medium 6.9A logic vulnerability in Brocade Fabric OS versions before 10.0.1 web management framework allows an authenticated, low-privileged user to bypass inner Role-Based Access Control (RBAC) checks under s…
Assigned by brocade
Oct 8, 2026
CVE-2026-94580Medium 5.7An arbitrary file and directory deletion vulnerability exists in the REST API management interface handling USB storage operations on Brocade Fabric OS versions before 10.0.1.
Assigned by brocade
Oct 8, 2026
CVE-2026-94584Low 2.1A race condition and thread-safety vulnerability exists in the web management daemon of Brocade Fabric OS versions before 10.0.1.
Assigned by brocade
Oct 8, 2026
CVE-2026-87688High 8.5An input validation vulnerability exists in the security certificate management component of the Brocade Fabric OS administrative management API.
Assigned by brocade
Oct 8, 2026
CVE-2026-87685High 8.4An arbitrary file manipulation vulnerability exists in the WebTools management interface of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1.
Assigned by brocade
Oct 8, 2026
CVE-2026-87687High 8.5An authorization and input validation vulnerability exists in Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1.
Assigned by brocade
Oct 8, 2026
CVE-2026-87673High 7.0An OS command injection vulnerability exists in maintenance command-line diagnostic utilities on Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1.
Assigned by brocade
Oct 8, 2026
CVE-2026-87674High 8.5A local privilege escalation vulnerability exists in the system logging daemon of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1.
Assigned by brocade
Oct 8, 2026
Page 1 of 2Next

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.