Vulnerability in Brocade Fabric OS

[ Description ]Official description

An improper file permission and missing authorization vulnerability exists in the diagnostic kernel module subsystem of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. An unprivileged local user can invoke privileged hardware tests, force system error conditions, reset hardware blades, or disrupt storage fabric operations.

[ Fixes ]Fixes and patches

No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.

[ Advisories ]Government CERT advisories

• NCSC-NL16 Oct 2026NCSC-2026-0432

  Vulnerabilities fixed in HPE Brocade Fabric OS Translated from Dutch

  Probability/damage M/HCVE-2026-87659CVE-2026-87660CVE-2026-87661+31 more CVEs
• BSI CERT-Bund7 Oct 2026WID-SEC-2026-3817

  Broadcom Fabric OS: Multiple vulnerabilities Translated from German

  CVE-2026-94580CVE-2026-94575CVE-2026-87673+31 more CVEs

[ References ]References

• support.broadcom.com/external/content/SecurityAdvisories/0/39155Vendor Advisory