CVE-2025-1976
Published 2025-04-24 · Updated 2026-06-17 · Source sirt@brocade.com
Summary
CVE-2025-1976 is a medium-severity (CVSS 6.7) vulnerability in Broadcom Brocade Fabric OS. CISA added it to the Known Exploited Vulnerabilities catalog on April 28, 2025, which means exploitation in the wild has been confirmed; US federal agencies had to remediate it by May 19, 2025. CISA does not currently list it as used in ransomware campaigns. Broadcom has 6 vulnerabilities in the KEV catalog, 1 of them linked to ransomware.
All 6 known-exploited Broadcom vulnerabilities →Description
Brocade Fabric OS versions starting with 9.1.0 have root access removed, however, a local user with admin privilege can potentially execute arbitrary code with full root privileges on Fabric OS versions 9.1.0 through 9.1.1d6.
CVSS vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CISA Known-Exploited Vulnerability
Product: Broadcom — Brocade Fabric OS
Name: Broadcom Brocade Fabric OS Code Injection Vulnerability
Date added: 2025-04-28 · Due: 2025-05-19
Required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.