CVE-2021-27796: Broadcom Fabric Operating System

Medium severity, CVSS 6.5. EPSS: 0.9% chance of exploitation in the next 30 days.

A vulnerability in Brocade Fabric OS versions before Brocade Fabric OS v8.0.1b, v7.4.1d could allow an authenticated attacker within the restricted shell environment (rbash) as either the “user” or “factory” account, to read the contents of any file on the filesystem utilizing one of a few available binaries.

Affected products

• Broadcom Fabric Operating System: before 7.4.1d (fixed in 7.4.1d); from 8.0.0, before 8.0.1b (fixed in 8.0.1b)

Published 2022-02-21. Last modified 2026-06-17.