CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 5,488 CVEs published, 358 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
5,488
Show in the list
Critical, last 7 days
358
Show in the list
Healthcare-tagged, last 7 days
4
Show in the list
Known exploited (CISA KEV)
1,747
Show in the list

Showing CVEs that name the product brocade:fabric_os. Show all products

44 CVEs, showing 1 to 44
CVESeverityTitlePublished
CVE-2025-1976
Known exploited
High 8.6Code injection exposure in Fabric OS 9.1.0 through 9.1.1d6
Assigned by brocade
Apr 24, 2025
CVE-2026-87679High 8.5When Brocade Fabric OS versions before 10.0.1 processes trunk configuration operations, the application parses user-supplied list strings into dynamically allocated heap arrays without enforcing boun…
Assigned by brocade
Oct 8, 2026
CVE-2026-87680High 8.5A command injection vulnerability in the REST API management interface of Brocade Fabric OS versions before 10.0.1 allows an authenticated user to execute arbitrary system commands via crafted input…
Assigned by brocade
Oct 8, 2026
CVE-2026-87681High 7.1An Access Control Bypass vulnerability exists in the Role-Based Access Control (RBAC) validation engine of Brocade Fabric OS versions before 10.0.1.
Assigned by brocade
Oct 8, 2026
CVE-2026-87682High 8.6Multiple OS Command Injection vulnerabilities exist in the management interface and session processing routines of Brocade Fabric OS versions before 10.0.1.
Assigned by brocade
Oct 8, 2026
CVE-2026-87683High 8.6Multiple stack-based buffer overflow vulnerabilities exist in the REST API management component of Brocade Fabric OS versions prior to 10.0.1.
Assigned by brocade
Oct 8, 2026
CVE-2026-87684High 8.7A stack-based buffer overflow vulnerability exists in the SNMP daemon request handling of Brocade Fabric versions before 10.0.1.
Assigned by brocade
Oct 8, 2026
CVE-2026-87671High 7.1An out-of-bounds memory read vulnerability exists in the web management daemon of Brocade Fabric OS versions before 10.0.1.
Assigned by brocade
Oct 8, 2026
CVE-2026-87659High 7.1A critical authorization bypass vulnerability exists in the Management Server handling of Brocade Fabric OS versions before 10.0.1.
Assigned by brocade
Oct 8, 2026
CVE-2026-94578High 7.5Brocade Fabric OS versions before 10.0.1 contain an authorization logic vulnerability in the AAA (Authentication, Authorization, and Accounting) integration framework allows remote authenticated user…
Assigned by brocade
Oct 8, 2026
CVE-2026-87686Medium 5.3An authentication and access control bypass vulnerability exists in the web server management interface of Brocade Fabric OS versions before 10.0.1.
Assigned by brocade
Oct 8, 2026
CVE-2026-87676Medium 6.9A stack-based buffer overflow vulnerability exists in the security library component of Brocade Fabric OS versions before 10.0.1.
Assigned by brocade
Oct 8, 2026
CVE-2026-87678Medium 6.9An input validation and output encoding vulnerability exists in the web management interface of Brocade Fabric OS versions before 10.0.1.
Assigned by brocade
Oct 8, 2026
CVE-2026-87669Medium 5.1A missing authorization check in Brocade Fabric OS versions before 10.0.1 REST API interface of affected platform releases allows an authenticated user, regardless of their assigned role or administr…
Assigned by brocade
Oct 8, 2026
CVE-2026-87670Medium 5.1An authorization logic vulnerability exists in the Brocade Fabric OS versions before 10.0.1 REST API gateway.
Assigned by brocade
Oct 8, 2026
CVE-2026-87672Medium 6.8An information disclosure vulnerability exists in the SupportLink diagnostic collection utilities of Brocade Fabric OS versions before 10.0.1.
Assigned by brocade
Oct 8, 2026
CVE-2026-87665Medium 6.0A stack-based buffer overflow vulnerability exists in the Internet Key Exchange (IKEv2) protocol handler on Brocade Fabric OS versions before 10.0.1.
Assigned by brocade
Oct 8, 2026
CVE-2026-87668Medium 6.9A stack-based buffer overflow vulnerability exists in the diagnostic execution utility of Brocade Fabric OS versions before 10.0.1.
Assigned by brocade
Oct 8, 2026
CVE-2026-94582Medium 6.8A memory buffer overflow vulnerability exists in the internal diagnostic and route validation routines used by the Fabric Shortest Path First (FSPF) protocol component of Brocade Fabric OS versions b…
Assigned by brocade
Oct 8, 2026
CVE-2026-94583Low 2.1A race condition vulnerability exists in the request processing logic of the REST management interface on Brocade Fabric OS versions before 10.0.1.
Assigned by brocade
Oct 8, 2026
CVE-2026-94575Medium 6.9A logic vulnerability in Brocade Fabric OS versions before 10.0.1 web management framework allows an authenticated, low-privileged user to bypass inner Role-Based Access Control (RBAC) checks under s…
Assigned by brocade
Oct 8, 2026
CVE-2026-94580Medium 5.7An arbitrary file and directory deletion vulnerability exists in the REST API management interface handling USB storage operations on Brocade Fabric OS versions before 10.0.1.
Assigned by brocade
Oct 8, 2026
CVE-2026-94584Low 2.1A race condition and thread-safety vulnerability exists in the web management daemon of Brocade Fabric OS versions before 10.0.1.
Assigned by brocade
Oct 8, 2026
CVE-2026-87688High 8.5An input validation vulnerability exists in the security certificate management component of the Brocade Fabric OS administrative management API.
Assigned by brocade
Oct 8, 2026
CVE-2026-87685High 8.4An arbitrary file manipulation vulnerability exists in the WebTools management interface of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1.
Assigned by brocade
Oct 8, 2026
CVE-2026-87687High 8.5An authorization and input validation vulnerability exists in Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1.
Assigned by brocade
Oct 8, 2026
CVE-2026-87673High 7.0An OS command injection vulnerability exists in maintenance command-line diagnostic utilities on Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1.
Assigned by brocade
Oct 8, 2026
CVE-2026-87674High 8.5A local privilege escalation vulnerability exists in the system logging daemon of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1.
Assigned by brocade
Oct 8, 2026
CVE-2026-87675High 7.3An OS command injection vulnerability exists in the configuration management subsystem of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1.
Assigned by brocade
Oct 8, 2026
CVE-2026-87666High 8.6An OS command injection vulnerability exists in the time and zone management subsystem of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1.
Assigned by brocade
Oct 8, 2026
CVE-2026-87667High 8.4An argument injection vulnerability exists in the configuration management command-line utility of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1.
Assigned by brocade
Oct 8, 2026
CVE-2026-87660High 7.0An improper file permission and missing authorization vulnerability exists in the diagnostic kernel module subsystem of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1.
Assigned by brocade
Oct 8, 2026
CVE-2026-87662High 7.0Brocade Fabric versions before 9.2.2d and 10.0.0 through 10.0.0a1 handling of specific download protocols utilizes unsanitized parameter strings.
Assigned by brocade
Oct 8, 2026
CVE-2026-87663High 7.1An authentication bypass and command injection vulnerability exists in the inter-switch remote execution service of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1.
Assigned by brocade
Oct 8, 2026
CVE-2026-87664High 8.5A session context forgery vulnerability exists in the web management daemon of Brocade Fabric OS versions 9.2.2d and 10.0.0 through 10.0.0a1.
Assigned by brocade
Oct 8, 2026
CVE-2026-94577High 7.3A privilege escalation vulnerability exists in the internal Command-Line Interface (CLI) authorization handling mechanism of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1.
Assigned by brocade
Oct 8, 2026
CVE-2026-94581High 8.5An OS command injection vulnerability exists in the REST API management interface of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 allows an authenticated, high-privileged remo…
Assigned by brocade
Oct 8, 2026
CVE-2026-94586High 8.5A command injection vulnerability exists in the WebTools administrative interface handling configuration download or file transfer operations of Brocade Fabric OS versions before 9.2.2d and 10.0.0 th…
Assigned by brocade
Oct 8, 2026
CVE-2026-87677Medium 5.4An OS command injection vulnerability exists in the account management subsystem of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1.
Assigned by brocade
Oct 8, 2026
CVE-2026-87661Medium 6.8Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 directly accepts Apache configuration file data during service setup or re-initialization.
Assigned by brocade
Oct 8, 2026
CVE-2026-94576Medium 5.9An authentication logic and privilege escalation vulnerability exists in the account management interface of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1.
Assigned by brocade
Oct 8, 2026
CVE-2026-94579Medium 5.4An OS command injection vulnerability exists in the PAM (Pluggable Authentication Module) session cleanup routines during SSH session termination on Brocade Fabric OS versions before 9.2.2d and 10.0.…
Assigned by brocade
Oct 8, 2026
CVE-2026-94587Medium 6.9A buffer overflow vulnerability exists in the WebTools administrative interface handling configuration download or file transfer operations of Brocade Fabric OS versions before 9.2.2d and 10.0.0 thro…
Assigned by brocade
Oct 8, 2026
CVE-2026-94585High 7.7An authentication bypass vulnerability exists in the web management interface of Brocade Fabric OS versions before 9.2.2d running on the MXG610 platform.
Assigned by brocade
Oct 8, 2026

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.