CVE-2026-0383CWE-78

Information disclosure in Brocade Fabric OS before 9.2.1c2, 9.2.2 through 9.2.2a and 10.0.0

High · published February 3, 2026

CVSS v4.0
8.2
EPSS
0%
Percentile
12.2
In the wild
Unconfirmed
What it is

⚡ An authenticated attacker can access sensitive commands stored in Bash history! This vulnerability in Brocade Fabric OS is like leaving your diary open on the coffee table for anyone to read. 🔥 Think of it as a bakery where the recipe book is casually left on the counter. If someone with access can see those secrets, they could whip up anything they want without breaking a sweat! An attacker with local access could retrieve sensitive commands that reveal critical system information, potentially leading to unauthorized actions in the network. This means they could exploit trust and gain further access to sensitive data or systems—talk about an inside job!

Put simply

Think of it as a bakery where the recipe book is casually left on the counter. If someone with access can see those secrets, they could whip up anything they want without breaking a sweat! CVE-2026-0383 is a vulnerability in Brocade Fabric OS that allows authenticated users with Bash shell access to read insecurely stored file contents, including command history, which could expose sensitive information.

What to do

An attacker with local access could retrieve sensitive commands that reveal critical system information, potentially leading to unauthorized actions in the network. This means they could exploit trust and gain further access to sensitive data or systems—talk about an inside job! To mitigate this vulnerability, ensure that sensitive file contents are stored securely and limit access to the Bash shell only to trusted users. Additionally, review user permissions and consider auditing any command history for sensitive data. It's time to lock those recipes up! You've got this! Following these steps will help secure your environment and keep those secrets safe. 🛡️

The record
Technical detail
CVSS v4.0
8.2 · HIGH
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N
EPSS
0.00223 · 12.2th percentile
Weakness
CWE-78 · Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Published
2026-02-03T03:55Z
EPSS history
Timeline
  • 03 FEB 03:55Z
    Information disclosure in Brocade Fabric OS before 9.2.1c2, 9.2.2 through 9.2.2a and 10.0.0
    cvelistv5