Authorization Logic Vulnerability in Brocade Fabric OS by Broadcom

CVE-2026-87670

What is CVE-2026-87670?

An authorization logic vulnerability in the Brocade Fabric OS versions before 10.0.1 allows an authenticated user with a valid REST session to exploit weaknesses in the internal gate's security model. By manipulating client-controlled HTTP headers, low-privilege users can access restricted management endpoints. This flaw exposes sensitive information, including chassis metadata, hardware memory patrolling states, and firmware integrity audit logs, posing a significant risk to system security and data integrity.

References