Command Injection Vulnerability in Brocade Fabric by Broadcom

CVE-2026-87662

What is CVE-2026-87662?

A vulnerability exists in Brocade Fabric due to improper handling of specific download protocols. This issue arises from the lack of sanitization for parameter strings during upgrade requests. When these unsanitized parameters are processed, they can be converted into system command strings that the firmware management daemon executes with elevated privileges. This oversight allows an attacker to inject arbitrary shell commands, potentially compromising the integrity and security of the affected systems.

References