CVE-2026-87674
Broadcom Fabric Operating System: OS command injection can lead to privilege escalation
- Risk score
- 47/100
- CVSS
- 7.8 v3.1
- Exploit chance (30 days)
- 0.1%
- Published
- 8 Oct 2026
Open in the live forecast Today's forecast
What to know
- What it is
- A local privilege escalation vulnerability exists in the system logging daemon of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. Insufficient access controls on internal inter-process communication (IPC) channels allow an unprivileged local user to submit malformed logging configurations. Due to…
- Affected
- Broadcom Fabric Operating System before 9.2.2
- Fix
- Upgrade Broadcom Fabric Operating System to 9.2.2 or later.
- Exploitation
- No known exploitation
Why it is Yellow
- CVSS 7.8 high
References
Original description
A local privilege escalation vulnerability exists in the system logging daemon of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. Insufficient access controls on internal inter-process communication (IPC) channels allow an unprivileged local user to submit malformed logging configurations. Due to improper input sanitization during configuration file generation, an attacker can inject arbitrary directives that execute with elevated privileges when the logging service reloads, leading to local privilege escalation.
Last activity 8 Oct 2026. Patch Forecast updates every hour.