Buffer Overflow Vulnerability in Brocade Fabric OS Security Library

CVE-2026-87676

What is CVE-2026-87676?

A stack-based buffer overflow vulnerability is present in the security library component of Brocade Fabric OS. This issue arises during the parsing of X.509 PEM certificates, specifically when the system fails to adequately validate the length of the Authority Key Identifier (AKI) extension. An authenticated user with administrative rights can exploit this by importing a malformed certificate that contains an oversized AKI extension. As the system attempts to process these attributes, it can lead to memory corruption, resulting in the crashing of the management daemon and creating a potential denial-of-service scenario.

References