Vulnerability in Brocade Fabric OS

[ Description ]Official description

Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 directly accepts Apache configuration file data during service setup or re-initialization. An attacker capable of corrupting the configuration structure will prevent the web management service from starting or recovering during service bring-up, leading to a persistent Denial of Service (DoS) of the administrative web interface.

[ Fixes ]Fixes and patches

No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.

[ Advisories ]Government CERT advisories

• NCSC-NL16 Oct 2026NCSC-2026-0432

  Vulnerabilities fixed in HPE Brocade Fabric OS Translated from Dutch

  Probability/damage M/HCVE-2026-87659CVE-2026-87660CVE-2026-87661+31 more CVEs
• BSI CERT-Bund7 Oct 2026WID-SEC-2026-3817

  Broadcom Fabric OS: Multiple vulnerabilities Translated from German

  CVE-2026-94580CVE-2026-94575CVE-2026-87673+31 more CVEs

[ References ]References

• support.broadcom.com/external/content/SecurityAdvisories/0/39160Vendor Advisory