Input Validation Flaw in Brocade Fabric OS Management API
CVE-2026-87688

8.5HIGH

Key Information:

Vendor

Brocade

Status
Vendor
CVE Published:
8 October 2026

What is CVE-2026-87688?

A vulnerability has been identified in the certificate management component of the Brocade Fabric OS administrative management API that allows for improper handling of user-supplied certificate identifiers. This lack of proper input validation can be exploited by an authenticated attacker with the necessary privileges to delete certificates, potentially enabling them to execute arbitrary system commands. The issue affects several versions of the Fabric OS, specifically those prior to 9.2.2d and from versions 10.0.0 to 10.0.0a1, posing significant risk to system integrity.

Affected Version(s)

Fabric OS 0 < 9.2.2d

Fabric OS 10.0.0 <= 10.0.0a1

References

CVSS V4

Score:
8.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.