Fabric Operating System vulnerabilitiesAnd the versions its exploited flaws hit.
Fabric Operating System is made by Broadcom. We track 80 published vulnerabilities in it, across 91 versions. 1 of them is on the list of flaws known to be exploited, the newest added on 28 April 2025. If you run Fabric Operating System, check your version against the exploited flaws below and patch those first.
The most recent Fabric Operating System flaw added to the known-exploited list is CVE-2025-1976, on 28 April 2025. We keep watching the known-exploited list.
Which versions of Fabric Operating System do the exploited flaws hit?
Each exploited flaw lists the versions it affects, usually as ranges. "9.1.0 to before 9.1.1d7" means from 9.1.0 up to, but not including, 9.1.1d7. Find your version, then patch.
- CVE-2025-1976Exploited list, 28 Apr 2025
Broadcom Brocade Fabric OS Code Injection Vulnerability
9.1.0 to before 9.1.1d7
Which Fabric Operating System vulnerabilities are being exploited?
1 flaw is on the government list of vulnerabilities known to be exploited. These are the ones criminals are using now, so they go first, whatever their severity score says.
- 6.7Broadcom Brocade Fabric OS Code Injection Vulnerability
Broadcom Brocade Fabric OS contains a code injection vulnerability that allows a local user with administrative privileges to execute arbitrary code with full root privileges.
Which Fabric Operating System flaws are most likely to be used?
Ranked by the latest exploit-likelihood forecast: the chance each flaw is used in an attack in the next 30 days. A high severity score on its own doesn't tell you that. Flaws shared by many other makers' products are left out.
- 53%CVE-2020-1967High
Server or client applications that call the SSL_check_chain() function during or after a TLS 1.3 handshake may crash due to a NULL pointer dereference as a result of incorrect handling of the...
- 15%CVE-2024-3596Critical
RADIUS Protocol under RFC 2865 is susceptible to forgery attacks by a local attacker who can modify any valid Response (Access-Accept, Access-Reject, or Access-Challenge) to any other response using a chosen-prefix...
- 14%CVE-2020-15778High
scp in OpenSSH through 8.3p1 allows command injection in the scp.c toremote function, as demonstrated by backtick characters in the destination argument.
- 5.3%CVE-2021-22876Medium
curl 7.1.1 to and including 7.75.0 is vulnerable to an "Exposure of Private Personal Information to an Unauthorized Actor" by leaking credentials in the HTTP Referer: header.
- 5.1%CVE-2019-19050High
A memory leak in the crypto_reportstat() function in crypto/crypto_user_stat.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering...
- 4.1%CVE-2004-1663Medium
Engenio/LSI Logic storage controllers, as used in products such as Storagetek D280, and IBM DS4100 (formerly FastT 100) and Brocade SilkWorm Switches, allow remote attackers to cause a denial of service (freeze and...
- 3.9%CVE-2023-38709High
Faulty input validation in the core of Apache allows malicious or exploitable backend/content generators to split HTTP responses.
- 3.6%CVE-2019-25013Medium
The iconv feature in the GNU C Library (aka glibc or libc6) through 2.32, when processing invalid multi-byte input sequences in the EUC-KR encoding, may have a buffer over-read.
- 3.5%CVE-2019-18805Critical
An issue was discovered in net/ipv4/sysctl_net_ipv4.c in the Linux kernel before 5.0.11.
- 3.5%CVE-2019-19069High
A memory leak in the fastrpc_dma_buf_attach() function in drivers/misc/fastrpc.c in the Linux kernel before 5.3.9 allows attackers to cause a denial of service (memory consumption) by triggering dma_get_sgtable()...
Running Fabric Operating System? We'll keep checking.
Looking flaws up one at a time doesn't scale. Tell us what you run once, and we tell you which flaws matter to you, in what order, and keep watching for new ones.
- Tell us what you runPick your software from a list, or let us work it out from your website.
- We match it to every flawOver 400,000 published flaws, checked against your list.
- Ranked by real-world riskA 0 to 100 score, led by evidence criminals are using it.
- Told as soon as we knowAn alert by email, in the app or by webhook to your own tools.
Free plan, no card needed. Nothing to install.
1 flaw being exploited affects software Acme tracks
Broadcom Brocade Fabric OS contains a code injection vulnerability that allows a local user with administrative privileges to execute arbitrary code with full root privileges.
- Matched to
- Fabric Operating System on Acme's software list
- What to do
- Patch first, then check for signs of use
Sent to the alert recipients Acme chose. Also in the app and to Acme's webhook.
We track 80 published vulnerabilities listed under the name Fabric Operating System, across 91 versions. The most recent Fabric Operating System flaw added to the known-exploited list is CVE-2025-1976, on 28 April 2025.
1 is on the list of flaws known to be exploited. The most recently added is CVE-2025-1976.
Each flaw names its own versions, usually as ranges. The newest, CVE-2025-1976, affects 9.1.0 to before 9.1.1d7. The versions for every exploited flaw are listed on this page.
Create a EdgeProtect account and track Fabric Operating System. We match it against every published flaw, give each one a risk score from 0 to 100 and keep watching, so you hear about new ones as soon as we know, by email, in the app or by webhook.