Improper File Permission and Lack of Authorization in Brocade Fabric OS
CVE-2026-87660

7HIGH

Key Information:

Vendor

Brocade
Status
Fabric Os
Vendor
CVE Published:
8 October 2026

What is CVE-2026-87660?

An improper file permission and authorization vulnerability exists in the diagnostic kernel module subsystem of Brocade Fabric OS. This issue affects versions prior to 9.2.2d and from 10.0.0 to 10.0.0a1. It enables unprivileged local users to execute privileged hardware tests, create forced system error conditions, reset hardware blades, or potentially disrupt essential storage fabric operations.

Affected Version(s)

Fabric OS 0 < 9.2.2d

Fabric OS 10.0.0 <= 10.0.0a1

References

https://support.broadcom.com/external/content/SecurityAdv...

CVSS V4

Score:
7
Severity:
HIGH
Confidentiality:
None
Integrity:
High
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.