CVE Tools
Track your stack

Fabric Operating System

146 CVEs tracked. 2 of them are in CISA KEV.

This hub aggregates every CVE we track for Fabric Operating System, a product in the networking infrastructure space. Use it to gauge the current risk picture and drill into individual advisories.

Fabric Operating System CVEs per month

Dec 2024 to Nov 2026. Point at a month, or focus the strip and use the arrow keys.
Fabric Operating System CVEs per month
MonthCVEs
2024-120
2025-010
2025-022
2025-030
2025-041
2025-050
2025-061
2025-071
2025-080
2025-090
2025-100
2025-110
2025-120
2026-010
2026-027
2026-030
2026-040
2026-050
2026-060
2026-070
2026-080
2026-090
2026-1043
2026-110

Severity

How the 146 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.

  • Critical107%
  • High6847%
  • Medium6242%
  • Low64%

Latest CVEs

The 15 most recently published vulnerabilities affecting Fabric Operating System.

  1. CVE-2026-94585An authentication bypass vulnerability exists in the web management interface of Brocade Fabric OS versions before 9.2.2d running on the MXG610 platform. An unauthenticated, network-adjacent attack...8.8
  2. CVE-2026-94587A buffer overflow vulnerability exists in the WebTools administrative interface handling configuration download or file transfer operations of Brocade Fabric OS versions before 9.2.2d and 10.0.0 th...4.5
  3. CVE-2026-94579An OS command injection vulnerability exists in the PAM (Pluggable Authentication Module) session cleanup routines during SSH session termination on Brocade Fabric OS versions before 9.2.2d and 10....8.0
  4. CVE-2026-94576An authentication logic and privilege escalation vulnerability exists in the account management interface of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. Under specific con...8.0
  5. CVE-2026-87661Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 directly accepts Apache configuration file data during service setup or re-initialization. An attacker capable of corrupting the...5.7
  6. CVE-2026-87677An OS command injection vulnerability exists in the account management subsystem of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. When an administrator initiates an account ...6.6
  7. CVE-2026-94586A command injection vulnerability exists in the WebTools administrative interface handling configuration download or file transfer operations of Brocade Fabric OS versions before 9.2.2d and 10.0.0 ...6.8
  8. CVE-2026-94581An OS command injection vulnerability exists in the REST API management interface of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 allows an authenticated, high-privileged re...6.8
  9. CVE-2026-94577A privilege escalation vulnerability exists in the internal Command-Line Interface (CLI) authorization handling mechanism of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. An...7.8
  10. CVE-2026-87664A session context forgery vulnerability exists in the web management daemon of Brocade Fabric OS versions 9.2.2d and 10.0.0 through 10.0.0a1. When processing local inter-process communication (IPC)...7.8
  11. CVE-2026-87663An authentication bypass and command injection vulnerability exists in the inter-switch remote execution service of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. When proces...6.7
  12. CVE-2026-87662Brocade Fabric versions before 9.2.2d and 10.0.0 through 10.0.0a1 handling of specific download protocols utilizes unsanitized parameter strings. When processing upgrade requests, parameters are co...6.7
  13. CVE-2026-87660An improper file permission and missing authorization vulnerability exists in the diagnostic kernel module subsystem of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. An unpr...7.1
  14. CVE-2026-87667An argument injection vulnerability exists in the configuration management command-line utility of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. When executing configuration...4.5
  15. CVE-2026-87666An OS command injection vulnerability exists in the time and zone management subsystem of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. When updating system timezone setting...8.0

Product grouping is registry-driven, with AI assist and human review. How it works