CVE-2025-1976 Broadcom Brocade Fabric OS Code Injection

What is CVE-2025-1976?

CVE-2025-1976 is a high-severity code injection vulnerability in Broadcom Fabric Operating System, published on 24 Apr 2025. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

Brocade Fabric OS versions starting with 9.1.0 have root access removed, however, a local user with admin privilege can potentially execute arbitrary code with full root privileges on Fabric OS versions 9.1.0 through 9.1.1d6.

Weakness: CWE-78, CWE-94

Which versions are affected by CVE-2025-1976?

It affects 1 product.

Products include Broadcom Fabric Operating System.

How do I fix CVE-2025-1976?

No fix has been published for CVE-2025-1976 yet. Limit exposure of the affected software until one is available. US federal agencies must fix it by 19 May 2025.

Upgrade, and never evaluate templates, expressions or code built from user input. More about Code injection.

Is CVE-2025-1976 being exploited?

Yes. Attackers have exploited CVE-2025-1976 in the wild since at least 28 Apr 2025.

Other vulnerabilities in Broadcom Fabric Operating System

• CVE-2021-22555 Linux Kernel Heap Out-of-Bounds Write Exploited High 8.3
• CVE-2022-33186 Command injection in Brocade Fabric OS Critical 9.8
• CVE-2021-27797 Hardcoded credentials in Brocade Fabric OS Critical 9.8
• CVE-2020-15371 Code injection in Brocade Fabric OS Critical 9.8
• CVE-2020-15373 Memory corruption in Brocade Fabric OS Critical 9.8

All Broadcom Fabric Operating System vulnerabilities

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-73hp-3m9v-h54h.