fabric operating system vulnerabilities and fixes

Recent CVEs affecting fabric operating system, with upgrade or downgrade steps. 43 tracked.

Also searched as: fabricoperatingsystem.

fabric operating system has 43 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 43. Most recent: 2026-10-08. Highest priority: CVE-2026-87684 (score 51/100).

• CVE-2026-94587 MEDIUM 4.5 UPGRADE A buffer overflow vulnerability exists in the WebTools administrative interface handling configuration downloa
• CVE-2026-94586 MEDIUM 6.8 UPGRADE A command injection vulnerability exists in the WebTools administrative interface handling configuration downl
• CVE-2026-94585 HIGH 8.8 UPGRADE An authentication bypass vulnerability exists in the web management interface of Brocade Fabric OS versions be
• CVE-2026-94581 MEDIUM 6.8 UPGRADE An OS command injection vulnerability exists in the REST API management interface of Brocade Fabric OS version
• CVE-2026-94579 HIGH 8.0 UPGRADE An OS command injection vulnerability exists in the PAM (Pluggable Authentication Module) session cleanup rout
• CVE-2026-94577 HIGH 7.8 UPGRADE A privilege escalation vulnerability exists in the internal Command-Line Interface (CLI) authorization handlin
• CVE-2026-94576 HIGH 8.0 UPGRADE An authentication logic and privilege escalation vulnerability exists in the account management interface of B
• CVE-2026-87677 MEDIUM 6.6 UPGRADE An OS command injection vulnerability exists in the account management subsystem of Brocade Fabric OS versions
• CVE-2026-87664 HIGH 7.8 UPGRADE A session context forgery vulnerability exists in the web management daemon of Brocade Fabric OS versions 9.2.
• CVE-2026-87663 MEDIUM 6.7 UPGRADE An authentication bypass and command injection vulnerability exists in the inter-switch remote execution servi
• CVE-2026-87662 MEDIUM 6.7 UPGRADE Brocade Fabric versions before 9.2.2d and 10.0.0 through 10.0.0a1 handling of specific download protocols util
• CVE-2026-87661 MEDIUM 5.7 UPGRADE Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 directly accepts Apache configuration fil
• CVE-2026-87688 MEDIUM 6.8 UPGRADE An input validation vulnerability exists in the security certificate management component of the Brocade Fabri
• CVE-2026-94580 MEDIUM 4.5 UPGRADE An arbitrary file and directory deletion vulnerability exists in the REST API management interface handling US
• CVE-2026-94584 LOW 2.6 UPGRADE A race condition and thread-safety vulnerability exists in the web management daemon of Brocade Fabric OS vers
• CVE-2026-87660 HIGH 7.1 UPGRADE An improper file permission and missing authorization vulnerability exists in the diagnostic kernel module sub
• CVE-2026-87666 HIGH 8.0 UPGRADE An OS command injection vulnerability exists in the time and zone management subsystem of Brocade Fabric OS ve
• CVE-2026-87667 MEDIUM 4.5 UPGRADE An argument injection vulnerability exists in the configuration management command-line utility of Brocade Fab
• CVE-2026-87673 HIGH 7.2 UPGRADE An OS command injection vulnerability exists in maintenance command-line diagnostic utilities on Brocade Fabri
• CVE-2026-87674 HIGH 7.8 UPGRADE A local privilege escalation vulnerability exists in the system logging daemon of Brocade Fabric OS versions b
• CVE-2026-87685 MEDIUM 6.8 UPGRADE An arbitrary file manipulation vulnerability exists in the WebTools management interface of Brocade Fabric OS
• CVE-2026-87687 HIGH 7.3 UPGRADE An authorization and input validation vulnerability exists in Brocade Fabric OS versions before 9.2.2d and 10.
• CVE-2026-87675 MEDIUM 6.8 UPGRADE An OS command injection vulnerability exists in the configuration management subsystem of Brocade Fabric OS ve
• CVE-2026-87676 MEDIUM 5.7 UPGRADE A stack-based buffer overflow vulnerability exists in the security library component of Brocade Fabric OS vers
• CVE-2026-87678 MEDIUM 5.2 UPGRADE An input validation and output encoding vulnerability exists in the web management interface of Brocade Fabric
• CVE-2026-87684 CRITICAL 9.8 UPGRADE A stack-based buffer overflow vulnerability exists in the SNMP daemon request handling of Brocade Fabric versi
• CVE-2026-87686 MEDIUM 4.3 UPGRADE An authentication and access control bypass vulnerability exists in the web server management interface of Bro
• CVE-2026-94578 HIGH 8.8 UPGRADE Brocade Fabric OS versions before 10.0.1 contain an authorization logic vulnerability in the AAA (Authenticati
• CVE-2026-94575 MEDIUM 5.7 UPGRADE A logic vulnerability in Brocade Fabric OS versions before 10.0.1 web management framework allows an authentic
• CVE-2026-94582 HIGH 7.8 UPGRADE A memory buffer overflow vulnerability exists in the internal diagnostic and route validation routines used by
• CVE-2026-94583 LOW 2.6 UPGRADE A race condition vulnerability exists in the request processing logic of the REST management interface on Broc
• CVE-2026-87672 MEDIUM 5.5 UPGRADE An information disclosure vulnerability exists in the SupportLink diagnostic collection utilities of Brocade F
• CVE-2026-87682 HIGH 8.8 UPGRADE Multiple OS Command Injection vulnerabilities exist in the management interface and session processing routine
• CVE-2026-87683 HIGH 8.8 UPGRADE Multiple stack-based buffer overflow vulnerabilities exist in the REST API management component of Brocade Fab
• CVE-2026-87659 CRITICAL 9.8 UPGRADE A critical authorization bypass vulnerability exists in the Management Server handling of Brocade Fabric OS ve
• CVE-2026-87665 HIGH 7.5 UPGRADE A stack-based buffer overflow vulnerability exists in the Internet Key Exchange (IKEv2) protocol handler on Br
• CVE-2026-87668 MEDIUM 6.5 UPGRADE A stack-based buffer overflow vulnerability exists in the diagnostic execution utility of Brocade Fabric OS ve
• CVE-2026-87669 MEDIUM 4.3 UPGRADE A missing authorization check in Brocade Fabric OS versions before 10.0.1 REST API interface of affected platf
• CVE-2026-87670 MEDIUM 4.3 UPGRADE An authorization logic vulnerability exists in the Brocade Fabric OS versions before 10.0.1 REST API gateway
• CVE-2026-87671 HIGH 7.5 UPGRADE An out-of-bounds memory read vulnerability exists in the web management daemon of Brocade Fabric OS versions b
• CVE-2026-87679 HIGH 7.2 UPGRADE When Brocade Fabric OS versions before 10.0.1 processes trunk configuration operations, the application parses
• CVE-2026-87680 HIGH 8.8 UPGRADE A command injection vulnerability in the REST API management interface of Brocade Fabric OS versions before 10
• CVE-2026-87681 MEDIUM 6.3 UPGRADE An Access Control Bypass vulnerability exists in the Role-Based Access Control (RBAC) validation engine of Bro

FAQ

How do I fix fabric operating system vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is fabric operating system being exploited right now?

None of the tracked fabric operating system CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which fabric operating system CVE should I patch first?

CVE-2026-87684 currently ranks highest (51/100): A stack-based buffer overflow vulnerability exists in the SNMP daemon request handling of Brocade Fabric versi.

RSS feed for fabric operating system · ← Back to latest CVEs