Fabric Operating System vulnerabilitiesAnd the versions its exploited flaws hit.

Product1 known exploited5 versions
The short answer

Fabric Operating System is made by Brocade. We track 10 published vulnerabilities in it, across 5 versions. 1 of them is on the list of flaws known to be exploited, the newest added on 6 October 2025. If you run Fabric Operating System, check your version against the exploited flaws below and patch those first.

Check your version

The most recent Fabric Operating System flaw added to the known-exploited list is CVE-2021-22555, on 6 October 2025. We keep watching the known-exploited list.

Versions

Which versions of Fabric Operating System do the exploited flaws hit?

Each exploited flaw lists the versions it affects, as published by the vendor. Find your version, then patch.

Known exploited

Which Fabric Operating System vulnerabilities are being exploited?

1 flaw is on the government list of vulnerabilities known to be exploited. These are the ones criminals are using now, so they go first, whatever their severity score says.

  1. 7.8
    CVE-2021-22555HighKnown exploited
    Linux Kernel Heap Out-of-Bounds Write Vulnerability

    Linux Kernel contains a heap out-of-bounds write vulnerability that could allow an attacker to gain privileges or cause a DoS (via heap memory corruption) through user name space.

    Chance of use79%Known exploited since6 Oct 2025
Exploit likelihood

Which Fabric Operating System flaws are most likely to be used?

Ranked by the latest exploit-likelihood forecast: the chance each flaw is used in an attack in the next 30 days. A high severity score on its own doesn't tell you that. Flaws shared by many other makers' products are left out.

50% or more10% to 49%Under 10%
  1. 79%
    CVE-2021-22555HighKnown exploited

    A heap out-of-bounds write affecting Linux since v2.6.19-rc1 was discovered in net/netfilter/x_tables.c.

    CVSS7.8Published7 Jul 2021
  2. 4.1%

    A insufficiently protected credentials vulnerability in fixed in curl 7.83.0 might leak authentication or cookie header data on HTTP redirects to the same host but another port number.

    CVSS6.5Published2 Jun 2022
  3. 3.3%

    An information disclosure vulnerability exists in curl 7.65.0 to 7.82.0 are vulnerable that by using an IPv6 address that was in the connection pool but with a different zone id it could reuse a connection instead.

    CVSS7.5Published2 Jun 2022
  4. 2.5%

    An improper authentication vulnerability exists in curl 7.33.0 to and including 7.82.0 which might allow reuse OAUTH2-authenticated connections without properly making sure that the connection was authenticated with...

    CVSS8.1Published26 May 2022
  5. 2.0%

    An insufficiently protected credentials vulnerability exists in curl 4.9 to and include curl 7.82.0 are affected that could allow an attacker to extract credentials when follows HTTP(S) redirects is used with...

    CVSS5.7Published2 Jun 2022
  6. 1.0%

    ext/fts3/fts3.c in SQLite before 3.32.0 has a use-after-free in fts3EvalNextRow, related to the snippet feature.

    CVSS7.0Published27 May 2020
  7. 0.7%

    SQLite before 3.32.0 allows a virtual table to be renamed to the name of one of its shadow tables, related to alter.c and build.c.

    CVSS5.5Published27 May 2020
  8. 0.6%

    ext/fts3/fts3_snippet.c in SQLite before 3.32.0 has a NULL pointer dereference via a crafted matchinfo() query.

    CVSS5.5Published27 May 2020
  9. 0.2%

    A segmentation fault can occur in Brocade Fabric OS after Brocade Fabric OS v9.0 and before Brocade Fabric OS v9.2.0a through the passwdcfg command.

    CVSS4.4Published31 Aug 2023
Precursor Intelligence

Running Fabric Operating System? We'll keep checking.

Looking flaws up one at a time doesn't scale. Tell us what you run once, and we tell you which flaws matter to you, in what order, and keep watching for new ones.

  1. Tell us what you runPick your software from a list, or let us work it out from your website.
  2. We match it to every flawOver 400,000 published flaws, checked against your list.
  3. Ranked by real-world riskA 0 to 100 score, led by evidence criminals are using it.
  4. Told as soon as we knowAn alert by email, in the app or by webhook to your own tools.

Free plan, no card needed. Nothing to install.

FAQ

Common questions, answered plainly.

Something else? Talk to the team →

We track 10 published vulnerabilities listed under the name Fabric Operating System, across 5 versions. The most recent Fabric Operating System flaw added to the known-exploited list is CVE-2021-22555, on 6 October 2025.

1 is on the list of flaws known to be exploited. The most recently added is CVE-2021-22555.

Create a Precursor Intelligence account and track Fabric Operating System. We match it against every published flaw, give each one a risk score from 0 to 100 and keep watching, so you hear about new ones as soon as we know, by email, in the app or by webhook.