FO
Product
Fabric Operating System
On CISA KEVExploited in the wild
146
CVEs
2
On KEV
9.8
Max CVSS
43
New 30D
Severity mix
Critical 11High 68Medium 60Low 6
Watch
Add Fabric Operating System to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-94580 | 4.5 | Oct 8 | An arbitrary file and directory deletion vulnerability exists in the REST API management interface handling USB storage operations on Brocade Fabric OS versions before 10.0.1 Affected: before 10.0.1 |
| CVE-2023-4163 | 4.4 | Aug 31 | In Brocade Fabric OS before v9.2.0a, a local authenticated privileged user can trigger a buffer overflow condition, leading to a kernel panic with large input to buffers in the… Affected: before 9.2.0a |
| CVE-2023-4162 | 4.4 | Aug 31 | A segmentation fault can occur in Brocade Fabric OS after Brocade Fabric OS v9.0 and before Brocade Fabric OS v9.2.0a through the passwdcfg command Affected: 9.0.1a before 9.2.0a |
| CVE-2020-29660 | 4.4 | Dec 9 | A locking inconsistency issue was discovered in the tty subsystem of the Linux kernel through 5.9.13 Affected: All versions, or not specified |
| CVE-2026-87670 | 4.3 | Oct 8 | An authorization logic vulnerability exists in the Brocade Fabric OS versions before 10.0.1 REST API gateway Affected: before 10.0.1 |
| CVE-2026-87669 | 4.3 | Oct 8 | A missing authorization check in Brocade Fabric OS versions before 10.0.1 REST API interface of affected platform releases allows an authenticated user, regardless of their… Affected: before 10.0.1 |
| CVE-2026-87686 | 4.3 | Oct 8 | An authentication and access control bypass vulnerability exists in the web server management interface of Brocade Fabric OS versions before 10.0.1 Affected: before 10.0.1 |
| CVE-2024-29953 | 4.3 | Jun 25 | Encoded session passwords on session storage for Virtual Fabric platforms Affected: 9.0.0 before 9.1.1d; 9.2.0 before 9.2.0b |
| CVE-2023-5973 | 4.3 | Apr 5 | Brocade Web Interface in Brocade Fabric OS v9.x and before v9.2.0 does not properly represent the portName to the user if the portName contains reserved characters Affected: 9.0.0 before 9.2.0 |
| CVE-2020-15376 | 4.3 | Dec 11 | Brocade Fabric OS versions before v9.0.0 and after version v8.1.0, configured in Virtual Fabric mode contain a weakness in the ldap implementation that could allow a remote ldap… Affected: 8.1.0 before 9.0.0 |