CVE-2025-9711CWE-272

Privilege escalation in Brocade Fabric OS before 9.2.1c3, and 9.2.2 though 9.2.2b

High · published February 3, 2026

CVSS v4.0
8.5
EPSS
0%
Percentile
3.2
In the wild
Unconfirmed
What it is

⚡ A local user could elevate their privileges to "root" with just a couple of commands! This vulnerability in Brocade Fabric OS before 9.2.1c3 could turn your trusted admin into a superuser! 🔥 Think of it like giving someone a key to your office but forgetting to change the lock on the front door. One small command can unlock everything, allowing them access to all your sensitive information. An attacker with local access could exploit this vulnerability to gain full control as the root user. This means they could change configurations, access or delete data, and even shut down critical services. The potential for chaos is absolutely devastating if an attacker exploited this!

Put simply

Think of it like giving someone a key to your office but forgetting to change the lock on the front door. One small command can unlock everything, allowing them access to all your sensitive information. This vulnerability allows an authenticated local user to elevate their privileges to root by using the export options of seccertmgmt and seccryptocfg commands, which shouldn’t be available to a regular user.

What to do

An attacker with local access could exploit this vulnerability to gain full control as the root user. This means they could change configurations, access or delete data, and even shut down critical services. The potential for chaos is absolutely devastating if an attacker exploited this! To mitigate this risk, immediately upgrade Brocade Fabric OS to version 9.2.1c3 or later. Ensure that only trusted users have local access, and review your security policies regarding command permissions for local users. You’ve got this! Follow the steps to secure your systems and keep those privileges locked down tight! 🛡️

The record
Technical detail
CVSS v4.0
8.5 · HIGH
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00142 · 3.2th percentile
Weakness
CWE-272 · Least Privilege Violation
Published
2026-02-03T05:19Z
EPSS history
Timeline
  • 03 FEB 05:19Z
    Privilege escalation in Brocade Fabric OS before 9.2.1c3, and 9.2.2 though 9.2.2b
    cvelistv5