# CVE-2025-1976

Brocade Fabric OS versions starting with 9.1.0 have root access removed, however, a local user with admin privilege can potentially execute arbitrary code with full root privileges on Fabric OS versions 9.1.0 through 9.1.1d6.

- Page: https://www.vulneraibility.com/cve/CVE-2025-1976
- CVSS: 6.7
- Known exploited: yes, in CISA KEV since 2025-04-28; CISA due date 2025-05-19
- EPSS: 0.69%
- CISA SSVC: exploitation active, automatable no, technical impact total (assessed 2025-04-30)
- Weakness: CWE-94
- Published: 2025-04-24

## Affected versions

- Brocade Fabric OS: affected Fabric OS versions 9.1.0 through 9.1.1d6

A version outside these ranges is not a statement that it is unaffected.

## References

- [other] https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25602
- [other] https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-1976

---
Summary, impact and action are written by the vulneraibility.com AI analysis pipeline from the CVE record, NVD, CISA and FIRST data; verify against the references.