OS Command Injection Vulnerability in Brocade Fabric OS

CVE-2026-87673

What is CVE-2026-87673?

An OS command injection vulnerability is present in the maintenance command-line diagnostic utilities of Brocade Fabric OS, specifically affecting versions prior to 9.2.2d and versions 10.0.0 to 10.0.0a1. This flaw stems from the system's inability to properly sanitize user-supplied input options when executing system commands through a shell interpreter. A privileged user with access to a maintenance account could craft specific parameters that, when executed, enable arbitrary command execution at the root level, posing significant security risks.

References