What is the CVSS score of CVE-2025-9711?

CVE-2025-9711 has a CVSS 3.1 base score of 7.8 (High). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.0%.

Which versions of Fabric Operating System are affected by CVE-2025-9711?

Fabric Operating System versions up to 9.2.1 contain a privilege escalation vulnerability (CVE-2025-9711) that allows authenticated local users to gain root-level access.

How to fix or mitigate CVE-2025-9711?

Within 24 hours: Identify and inventory all systems running Fabric OS versions 9.2.1 and earlier; restrict local user access to Fabric OS devices to essential personnel only. Within 7 days: Implement enhanced logging and monitoring for privilege escalation attempts; conduct access reviews to remove unnecessary local accounts. Within 30 days: Establish vendor contact for patch availability timeline; evaluate upgrade or replacement options for affected systems; implement network segmentation to isolate Fabric OS devices from critical infrastructure.

Fabric Operating System CVE-2025-9711

HIGH

Least Privilege Violation (CWE-272)

2026-02-03 sirt@brocade.com

Information Disclosure Fabric Operating System

7.8

CVSS 3.1

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 21:54 vuln.today

CVE Published

Feb 03, 2026 - 06:15 nvd

HIGH 7.8

DescriptionNVD

A vulnerability in Brocade Fabric OS before 9.2.1c3 could allow elevating the privileges of the local authenticated user to “root” using the export option of seccertmgmt and seccryptocfg commands.

AnalysisAI

Fabric Operating System versions up to 9.2.1 contains a vulnerability that allows attackers to elevating the privileges of the local authenticated user to “root” using the exp (CVSS 7.8).

Technical ContextAI

affects Fabric Operating System. in Brocade Fabric OS before 9.2.1c3 could allow elevating the privileges of the local authenticated user to “root” using the export option of seccertmgmt and seccryptocfg commands.

RemediationAI

Monitor vendor advisories for a patch.

CVE-2025-9711 vulnerability details – vuln.today

Back

Fabric Operating System CVE-2025-9711

CVSS VectorNVD

Lifecycle Timeline

DescriptionNVD

AnalysisAI

Technical ContextAI

RemediationAI

Share

External POC / Exploit Code