CVE-2025-9711: Broadcom Fabric Operating System

High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days.

A vulnerability in Brocade Fabric OS before 9.2.1c3 could allow elevating the privileges of the local authenticated user to “root” using the export option of seccertmgmt and seccryptocfg commands.

Affected products

• Broadcom Fabric Operating System: before 9.2.1c3 (fixed in 9.2.1c3); from 9.2.2, before 9.2.2c (fixed in 9.2.2c)

Published 2026-02-03. Last modified 2026-06-17.