Broadcom Brocade Fabric OS Code Injection Vulnerability. Actively exploited: CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 28/04/2025. Patch affected systems as an emergency.
| Package | Affected versions | Patched versions |
|---|---|---|
| Brocade Fabric OS | Versions not published yet (product named by CISA KEV) | |
Brocade Fabric OS versions starting with 9.1.0 have root access removed, however, a local user with admin privilege can potentially execute arbitrary code with full root privileges on Fabric OS versions 9.1.0 through 9.1.1d6.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free