Stack-Based Buffer Overflow in Brocade Fabric Software
CVE-2026-87684

8.7HIGH

Key Information:

Vendor

Brocade
Status
Fabric Os
Vendor
CVE Published:
8 October 2026

What is CVE-2026-87684?

A stack-based buffer overflow vulnerability exists in the handling of SNMP daemon requests within Brocade Fabric software versions prior to 10.0.1. This issue arises when the software processes an incoming SNMPv3 packet. It fails to adequately validate the length of the user-supplied context name, allowing a remote, unauthenticated attacker to send a specially crafted SNMPv3 packet. This can lead to memory corruption, denial of service through daemon crashes, or even arbitrary code execution, posing a significant risk to system integrity.

Affected Version(s)

Fabric OS 0 < 10.0.1

References

https://support.broadcom.com/external/content/SecurityAdv...

CVSS V4

Score:
8.7
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.