CVE-2026-0383

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

A vulnerability in Brocade Fabric OS could allow an authenticated, local attacker with privileges to access the Bash shell to access insecurely stored file contents including the history command.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-78

Affected software

Vendor	Product	Versions
Brocade	Fabric OS	before 9.2.1c2, 9.2.2 through 9.2.2a and 10.0.0

References

https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36851Vendor Advisory

Timeline

Published: Feb 3, 2026
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2026

CVE-2026-03855.0Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability CVE-2026-03867.5Improper access control in Windows Deployment Services allows an unauthorized attacker to execute code over an adjacent network.CVE-2026-03906.7Reliance on untrusted inputs in a security decision in Windows Boot Loader allows an authorized attacker to bypass a security feature locall CVE-2026-03916.5User interface (ui) misrepresentation of critical information in Microsoft Edge for Android allows an unauthorized attacker to perform spoof CVE-2026-03927.3eParakstītājs 3.0 for Windows before version 1.10.0 retrieves and executes its automatic updates over a channel that is not authenticated or CVE-2026-03936.5The affected product may expose credentials remotely between low privileged visualization users during concurrent login operations due to in CVE-2026-03945.3When dovecot has been configured to use per-domain passwd files, and they are placed one path component above /etc, or slash has been added CVE-2026-03964.3An attacker might be able to inject HTML content into the internal web dashboard by sending crafted DNS queries to a DNSdist instance where CVE-2026-03974.3When the internal webserver is enabled (default is disabled), an attacker might be able to trick an administrator logged to the dashboard in CVE-2026-03985.3Crafted zones can lead to increased resource usage and crafted CNAME chains can lead to cache poisoning in Recursor.CVE-2026-03994.9Multiple post-authentication stack-based buffer overflow vulnerabilities in the SonicOS management interface due to improper bounds checking CVE-2026-04004.9A post-authentication Format String vulnerability in SonicOS allows a remote attacker to crash a firewall.