CVE-2022-27775: Brocade Fabric Operating System

High severity, CVSS 7.5. EPSS: 3.2% chance of exploitation in the next 30 days.

An information disclosure vulnerability exists in curl 7.65.0 to 7.82.0 are vulnerable that by using an IPv6 address that was in the connection pool but with a different zone id it could reuse a connection instead.

Affected products

• Brocade Fabric Operating System: affected versions not specified
• Debian Debian Linux: version 11.0 only
• Haxx Curl: from 7.65.0, up to and including 7.82.0
• Netapp Clustered Data Ontap: affected versions not specified
• Netapp h300s Firmware: affected versions not specified
• Netapp h410s Firmware: affected versions not specified
• Netapp h500s Firmware: affected versions not specified
• Netapp h700s Firmware: affected versions not specified
• Netapp Hci Bootstrap OS: affected versions not specified
• Netapp Solidfire & Hci Management Node: affected versions not specified
• Netapp Solidfire & Hci Storage Node: affected versions not specified
• Splunk Universal Forwarder: from 8.2.0, before 8.2.12 (fixed in 8.2.12); from 9.0.0, before 9.0.6 (fixed in 9.0.6); version 9.1.0 only

Published 2022-06-02. Last modified 2026-06-17.