Vulnerability in Brocade Fabric OS

[ Description ]Official description

A stack-based buffer overflow vulnerability exists in the Internet Key Exchange (IKEv2) protocol handler on Brocade Fabric OS versions before 10.0.1. The vulnerability occurs when processing initial IKE key exchange requests on extension switches or blades running IPsec-enabled Fibre Channel over IP (FCIP) circuits. An unauthenticated remote attacker can exploit this vulnerability by sending a single, specifically crafted UDP packet (Port 500) containing an oversized Nonce payload. Successful exploitation results in a denial of service (data-plane process crash)

[ Fixes ]Fixes and patches

No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.

[ Advisories ]Government CERT advisories

• NCSC-NL16 Oct 2026NCSC-2026-0432

  Vulnerabilities fixed in HPE Brocade Fabric OS Translated from Dutch

  Probability/damage M/HCVE-2026-87659CVE-2026-87660CVE-2026-87661+31 more CVEs
• BSI CERT-Bund7 Oct 2026WID-SEC-2026-3817

  Broadcom Fabric OS: Multiple vulnerabilities Translated from German

  CVE-2026-94580CVE-2026-94575CVE-2026-87673+31 more CVEs

[ References ]References

• support.broadcom.com/external/content/SecurityAdvisories/0/39148Vendor Advisory