Security Vulnerability for Broadcom Fabric OS with SAN environment
Applies to
- MetroCluster FC
- AFF-A900 systems
- FAS
- ONTAP 9.17.1P9
- Brocade Fibre Channel switches
- Fabric OS versions prior to 10.0.1CVEs
Issue
Risk assessment and regarding security vulnerabilities (CVEs) for Broadcom Fabric OS versions prior to 10.0.1, according to CERT-Bund report WID-SEC-2026-3779 and Broadcom Security Advisories 39074–39081.
The vulnerabilities may allow arbitrary code execution, denial-of-service, information disclosure, file manipulation, and security mechanism bypass on Brocade switches
