Argument Injection Vulnerability in Brocade Fabric OS Configuration Utility
CVE-2026-87667

8.4HIGH

Key Information:

Vendor

Brocade

Status
Vendor
CVE Published:
8 October 2026

What is CVE-2026-87667?

An argument injection vulnerability in the Brocade Fabric OS configuration management command-line utility allows authenticated users with low privileges to exploit input sanitation failures. When executing configuration viewing commands with search pattern filters, the utility improperly handles user-supplied search strings, enabling access to arbitrary files on the local system. This could lead to exposure of sensitive configuration files, system password hashes, and other critical secrets, increasing the risk of unauthorized access and data breaches.

Affected Version(s)

Fabric OS 0 < 9.2.2d

Fabric OS 10.0.0 <= 10.0.0a1

References

CVSS V4

Score:
8.4
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
None
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.