PT-2026-5921 · Brocade · Brocade Fabric Os

Published 2026-02-03 · Updated 2026-02-03 · CVE-2025-58381

Positive Technologies (AI Summary)

CVSS v4.0

4.6

Medium

Base vector

AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions Brocade Fabric OS versions prior to 9.2.1c2 Brocade Fabric OS versions 9.2.2 through 9.2.2a

Description A flaw exists within Brocade Fabric OS that may allow an authenticated attacker possessing administrative privileges to manipulate path variables and navigate the directory structure. The attacker can achieve this by utilizing shell commands such as source, ping6, sleep, disown, and wait. This could enable unauthorized access to different directories.

Recommendations Update to Brocade Fabric OS version 9.2.1c2 or later. Update to a version of Brocade Fabric OS later than 9.2.2a.

Fix

Weakness Enumeration

CWE-35

Related Identifiers

CVE-2025-58381

Affected Products

Brocade Fabric Os

References · 5

• https://osv.dev/vulnerability/CVE-2025-58381 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-58381 · Security Note
• https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36853 · Vendor Advisory
• https://t.me/CVEtracker/43568 · Telegram Post
• https://t.me/cveNotify/150685 · Telegram Post