DeutschIn der Originalsprache angezeigt — eine vollständige Übersetzung ist für eine zukünftige Version geplant.
Broadcom Fabric OS: Mehrere Schwachstellen
Advisory ansehen veröffentlicht 2026-10-07
Ein Angreifer kann mehrere Schwachstellen in Broadcom Fabric OS ausnutzen, um seine Privilegien zu erhöhen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, um Dateien zu manipulieren, um Sicherheitsvorkehrungen zu umgehen und um beliebigen Programmcode auszuführen.
01
beschreibt (34)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2026-94587US | medium4.5 | — | ||
A buffer overflow vulnerability exists in the WebTools administrative interface handling configuration download or file transfer operations of Brocade Fabric OS versions before 9.2… | ||||
| CVE-2026-94586US | medium6.8 | — | ||
A command injection vulnerability exists in the WebTools administrative interface handling configuration download or file transfer operations of Brocade Fabric OS versions before 9… | ||||
| CVE-2026-94585US | high8.8OT erhöht | — | ||
An authentication bypass vulnerability exists in the web management interface of Brocade Fabric OS versions before 9.2.2d running on the MXG610 platform. An unauthenticated, networ… | ||||
| CVE-2026-94581US | medium6.8 | — | ||
An OS command injection vulnerability exists in the REST API management interface of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 allows an authenticated, h… | ||||
| CVE-2026-94579US | high8.0 | — | ||
An OS command injection vulnerability exists in the PAM (Pluggable Authentication Module) session cleanup routines during SSH session termination on Brocade Fabric OS versions befo… | ||||
| CVE-2026-94577US | high7.8 | — | ||
A privilege escalation vulnerability exists in the internal Command-Line Interface (CLI) authorization handling mechanism of Brocade Fabric OS versions before 9.2.2d and 10.0.0 thr… | ||||
| CVE-2026-94576US | high8.0 | — | ||
An authentication logic and privilege escalation vulnerability exists in the account management interface of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. U… | ||||
| CVE-2026-87677US | medium6.6 | — | ||
An OS command injection vulnerability exists in the account management subsystem of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. When an administrator init… | ||||
| CVE-2026-87664US | high7.8OT erhöht | — | ||
A session context forgery vulnerability exists in the web management daemon of Brocade Fabric OS versions 9.2.2d and 10.0.0 through 10.0.0a1. When processing local inter-process co… | ||||
| CVE-2026-87663US | medium6.7 | — | ||
An authentication bypass and command injection vulnerability exists in the inter-switch remote execution service of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0… | ||||
| CVE-2026-87661US | medium5.7 | — | ||
Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 directly accepts Apache configuration file data during service setup or re-initialization. An attacker capable… | ||||
| CVE-2026-94584US | low2.6 | — | ||
A race condition and thread-safety vulnerability exists in the web management daemon of Brocade Fabric OS versions before 10.0.1. When handling user authentication requests across… | ||||
| CVE-2026-94580US | medium4.5 | — | ||
An arbitrary file and directory deletion vulnerability exists in the REST API management interface handling USB storage operations on Brocade Fabric OS versions before 10.0.1. An a… | ||||
| CVE-2026-94575US | medium5.7 | — | ||
A logic vulnerability in Brocade Fabric OS versions before 10.0.1 web management framework allows an authenticated, low-privileged user to bypass inner Role-Based Access Control (R… | ||||
| CVE-2026-87688US | medium6.8 | — | ||
An input validation vulnerability exists in the security certificate management component of the Brocade Fabric OS administrative management API. When processing certificate manage… | ||||
| CVE-2026-87675US | medium6.8 | — | ||
An OS command injection vulnerability exists in the configuration management subsystem of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. When performing a co… | ||||
| CVE-2026-87674US | high7.8 | — | ||
A local privilege escalation vulnerability exists in the system logging daemon of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. Insufficient access controls… | ||||
| CVE-2026-87673US | high7.2 | — | ||
An OS command injection vulnerability exists in maintenance command-line diagnostic utilities on Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. The binary fa… | ||||
| CVE-2026-87667US | medium4.5 | — | ||
An argument injection vulnerability exists in the configuration management command-line utility of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. When execut… | ||||
| CVE-2026-87666US | high8.0 | — | ||
An OS command injection vulnerability exists in the time and zone management subsystem of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. When updating system… | ||||
20 von 34 angezeigt
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- Brocade Security Advisory vom 2026-10-07external
- Brocade Security Advisory vom 2026-10-07external
- Brocade Security Advisory vom 2026-10-07external
- Brocade Security Advisory vom 2026-10-07external
- Brocade Security Advisory vom 2026-10-07external
- Brocade Security Advisory vom 2026-10-07external
- Brocade Security Advisory vom 2026-10-07external
- Brocade Security Advisory vom 2026-10-07external
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan