Fabric OS
- Software type
- Network operating system
- Total vulnerabilities (90 days)
- 43
- Products & ServicesProducts & Services
- SolutionsSolutions
- PricingPricing
- CompanyCompany
- ResourcesResources
en
en
As of 11/08/2026, Fabric OS recorded 43 security vulnerabilities in the last 90 days, of which 25 are rated High or Critical. None of these vulnerabilities is actively exploited (KEV) according to CISA's catalog. CyStack recommends that organizations and individual users apply patches as soon as possible.
CyStack does not yet have sufficient official-source data to identify the latest version of Fabric OS and determine which vulnerabilities affect that version.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2025-4661Path transversal vulnerability potentially leading to sensitive information disclosureCVE-2025-1976Code injection exposure in Fabric OS 9.1.0 through 9.1.1d6CVE-2024-7517Privileged escalation via crafted use of portcfg commandCVE-2024-10403SFTP/FTP password could be captured in plain text in Supportsave generated from SANnavCVE-2024-7516Brocade Fabric OS before 9.2.2 does not enforce strict host key checking| Vulnerability | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2025-4661Path transversal vulnerability potentially leading to sensitive information disclosure | Exploitation statusNot exploited | FixNo |
| SeverityMedium |
CVE-2025-1976Code injection exposure in Fabric OS 9.1.0 through 9.1.1d6 | Exploitation statusKEV | FixNo | Published04/24/2025 | SeverityHigh |
|---|
CVE-2024-7517Privileged escalation via crafted use of portcfg command | Exploitation statusNot exploited | FixNo | Published11/21/2024 | SeverityHigh |
|---|
CVE-2024-10403SFTP/FTP password could be captured in plain text in Supportsave generated from SANnav | Exploitation statusNot exploited | FixNo | Published11/21/2024 | SeverityMedium |
|---|
CVE-2024-7516Brocade Fabric OS before 9.2.2 does not enforce strict host key checking | Exploitation statusNot exploited | FixNo | Published11/12/2024 | SeverityHigh |
|---|
CVE-2024-5460Brocade Fabric OS versions prior to v9.0 have default community strings | Exploitation statusNot exploited | FixNo | Published06/25/2024 | SeverityHigh |
|---|
CVE-2024-29954password management API prints sensitive information in log files | Exploitation statusNot exploited | FixYes | Published06/25/2024 | SeverityMedium |
|---|
CVE-2024-29953Encoded session passwords on session storage for Virtual Fabric platforms | Exploitation statusNot exploited | FixYes | Published06/25/2024 | SeverityMedium |
|---|
CVE-2023-5973Truncated port name | Exploitation statusNot exploited | FixNo | Published04/05/2024 | SeverityMedium |
|---|
CVE-2023-3454CVE-2023-3454 | Exploitation statusNot exploited | FixNo | Published04/04/2024 | SeverityHigh |
|---|
CVE-2023-4162Segmentation fault in Brocade Fabric OS after Brocade Fabric OS v9.0 | Exploitation statusNot exploited | FixNo | Published08/31/2023 | SeverityMedium |
|---|
CVE-2023-3489firmwaredownload command could log servers passwords in clear text | Exploitation statusNot exploited | FixNo | Published08/30/2023 | SeverityHigh |
|---|
CVE-2023-31927An information disclosure in the web interface of Brocade Fabric OS | Exploitation statusNot exploited | FixNo | Published08/02/2023 | SeverityMedium |
|---|
CVE-2023-31926Arbitrary File Overwrite using less command | Exploitation statusNot confirmed | FixNo | Published08/02/2023 | SeverityHigh |
|---|
CVE-2023-31928XSS vulnerability in Brocade Webtools | Exploitation statusNot confirmed | FixNo | Published08/01/2023 | SeverityMedium |
|---|
CVE-2023-31432Privilege issues in multiple commands | Exploitation statusNot exploited | FixNo | Published08/01/2023 | SeverityHigh |
|---|
CVE-2023-31431A buffer overflow vulnerability in “diagstatus” command | Exploitation statusNot confirmed | FixNo | Published08/01/2023 | SeverityMedium |
|---|
CVE-2023-31429Multiple commands print sensitive information in the terminal | Exploitation statusNot exploited | FixNo | Published08/01/2023 | SeverityMedium |
|---|
CVE-2023-31428CLI allows upload or transfer files of dangerous types | Exploitation statusNot exploited | FixNo | Published08/01/2023 | SeverityMedium |
|---|
CVE-2023-31427Knowledge of full path name | Exploitation statusNot confirmed | FixNo | Published08/01/2023 | SeverityHigh |
|---|
CVE-2023-31425Privilege escalation via the fosexec command | Exploitation statusNot exploited | FixNo | Published08/01/2023 | SeverityHigh |
|---|
71 Results | Page 2 of 2