As cited
Copy frozen at (site build).
vulnerabilities
NCSC-2026-0432 Vulnerabilities fixed in HPE Brocade Fabric OS
HPE issued patches for multiple security vulnerabilities in Brocade Fabric OS versions before 10.0.1, affecting the 9.2.x and 10.0.x release lines. The flaws span authentication bypass, denial of service, information disclosure, privilege escalation, buffer overflows, command injection, and remote code execution (RCE) through management requests, REST application programming interface (API) calls, web interfaces, and configuration files. Some vulnerabilities require authentication while others can be exploited by unauthenticated network-adjacent attackers, impacting the integrity, confidentiality, and availability of fabric systems and underlying network infrastructure.
Why it matters: Storage and fabric network administrators running affected Brocade Fabric OS versions must apply patches immediately to prevent unauthorized administrative access, local and remote code execution, and denial of service attacks against critical infrastructure.
- Source published
- First seen by Cybersecurity Tracker