Missing Authorization Check in Brocade Fabric OS Allows Unauthorized Access

CVE-2026-87669

What is CVE-2026-87669?

A vulnerability exists in the Brocade Fabric OS versions prior to 10.0.1, where a flaw in the REST API interface allows authenticated users to bypass authorization checks. This permits users, irrespective of their role or permissions, to gain access to Monitoring and Alerting Policy Suite (MAPS) violation data for all logical switches. This flaw can be exploited by attackers with low-privilege API access, enabling them to retrieve sensitive system-wide health metrics, performance violations, and configuration details without the necessary permissions.

References