Out-of-Bounds Memory Read Vulnerability in Brocade Fabric OS Web Management Daemon

CVE-2026-87671

What is CVE-2026-87671?

An out-of-bounds memory read vulnerability is present in the web management daemon of Brocade Fabric OS prior to version 10.0.1. This security flaw allows unauthenticated remote attackers to exploit specific URL query parameters that do not validate array index boundaries or conduct numerical range checks. By crafting an HTTP request with extreme numerical values in the query string, attackers can cause an invalid memory dereference, leading to a crash of the web management process. This results in a Denial of Service (DoS) condition and may cause temporary disruptions in the management plane.

References