CVE-2026-87684 — Brocade / Fabric OS

Description (CNA)

A stack-based buffer overflow vulnerability exists in the SNMP daemon request handling of Brocade Fabric versions before 10.0.1. When processing an incoming SNMPv3 packet, an internal statistics gathering handler copies user-supplied context name data into a fixed-size buffer without properly validating the length of the string. A remote, unauthenticated attacker (under default configuration) can exploit this vulnerability by sending a specially crafted SNMPv3 packet, leading to memory corruption, daemon crash (Denial of Service), or potential arbitrary code execution.

Affected (CNA)

Vendor / product	Versions
Brocade / Fabric OS	affected 0 before 10.0.1

CWE

CWE-121

References

https://support.broadcom.com/external/content/SecurityAdvisories/0/39078

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.