Session Context Forgery in Brocade Fabric OS Web Management Daemon

CVE-2026-87664

What is CVE-2026-87664?

A session context forgery vulnerability exists in the web management daemon of Brocade Fabric OS, specifically affecting versions 9.2.2d and 10.0.0 through 10.0.0a1. This flaw arises during local inter-process communication (IPC) storage callbacks where the service registers session structures, including critical administrative role permissions, user identifiers, and authorization flags, without validating the authenticity of the sending process. Exploitation of this vulnerability enables an attacker to gain unauthorized administrative privileges on the web management interface, thereby compromising the integrity and security of the system.

References