CVE-2026-87673 — Brocade / Fabric OS

Description (CNA)

An OS command injection vulnerability exists in maintenance command-line diagnostic utilities on Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. The binary fails to sanitize user-supplied input options when invoking underlying system commands through a shell interpreter. A privileged user with maintenance account access can exploit this issue by supplying crafted parameters, which results in arbitrary OS command execution with root privileges.

Affected (CNA)

Vendor / product	Versions
Brocade / Fabric OS	affected 0 before 9.2.2d; affected 10.0.0 through 10.0.0a1

CWE

CWE-78

References

https://support.broadcom.com/external/content/SecurityAdvisories/0/39144

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.