Buffer Overflow Vulnerability in Brocade Fabric OS by Broadcom
CVE-2026-94587

6.9MEDIUM

Key Information:

Vendor

Brocade
Status
Fabric Os
Vendor
CVE Published:
8 October 2026

What is CVE-2026-94587?

A buffer overflow exists in the WebTools administrative interface of Brocade Fabric OS during configuration download and file transfer operations. Authenticated users with sufficient permissions can exploit this vulnerability, leading to stack buffer overflows that may crash the weblinker daemon, potentially disrupting normal operations and affecting system stability. This issue is present in versions prior to 9.2.2d and in the 10.0.0 series up to 10.0.0a1.

Affected Version(s)

Fabric OS 0 < 9.2.2d

Fabric OS 10.0.0 <= 10.0.0a1

References

https://support.broadcom.com/external/content/SecurityAdv...

CVSS V4

Score:
6.9
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.