Vulnerability in Brocade Fabric OS

[ Description ]Official description

Multiple OS Command Injection vulnerabilities exist in the management interface and session processing routines of Brocade Fabric OS versions before 10.0.1. Input processing flaws during remote management connection validation and session verification for directory-based user accounts allow untrusted input containing shell metacharacters to reach internal system execution wrappers. An authenticated user or a compromised directory service account can exploit these vulnerabilities to execute arbitrary operating system commands with elevated privileges on the target device.

[ Fixes ]Fixes and patches

No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.

[ Advisories ]Government CERT advisories

• BSI CERT-Bund6 Oct 2026WID-SEC-2026-3779

  Broadcom Fabric OS: Multiple vulnerabilities Translated from German

  CVE-2026-87681CVE-2026-87684CVE-2026-87687+5 more CVEs

[ References ]References

• support.broadcom.com/external/content/SecurityAdvisories/0/39076Vendor Advisory