What’s Vulnerable › Vulnerabilities
CVE-2025-58381: Directory transversal vulnerability in Brocade Fabric OS before 9.2.1c2 and 9.2.2 through 9.2.2a using various shell commands
- Severity: low (CVSS 2.3 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.2% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2026-02-03 · updated 2026-06-17
- Weakness: CWE-35
Description
A vulnerability in Brocade Fabric OS before 9.2.1c2 could allow an authenticated attacker with admin privileges using the shell commands “source, ping6, sleep, disown, wait to modify the path variables and move upwards in the directory structure or to traverse to different directories.
Affected products
- Brocade Fabric OS: before 9.2.1c2; from 9.2.2 before 9.2.2b — fixed in 9.2.1c2, 9.2.2b
How to fix
Upgrade to a fixed version: Brocade Fabric OS 9.2.1c2, 9.2.2b. Check the vendor advisory for mitigations.
References
Get alerted when CVE-2025-58381 or the next vulnerability affects your stack