CVE-2026-87687
An authorization and input validation vulnerability exists in Brocade Fabric OS versions before…
- Risk score
- 46/100
- CVSS
- 7.3 v3.1
- Exploit chance (30 days)
- 0.2%
- Published
- 8 Oct 2026
Open in the live forecast Today's forecast
What to know
- What it is
- An authorization and input validation vulnerability exists in Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. An authenticated user with restricted privileges in one Virtual Fabric can exploit this issue by submitting a specially crafted request containing an arbitrary fabric identifier. This all…
- Affected
- Broadcom Fabric Operating System before 9.2.2
- Fix
- Upgrade Broadcom Fabric Operating System to 9.2.2 or later.
- Exploitation
- No known exploitation
Why it is Yellow
- CVSS 7.3 high
References
Original description
An authorization and input validation vulnerability exists in Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. An authenticated user with restricted privileges in one Virtual Fabric can exploit this issue by submitting a specially crafted request containing an arbitrary fabric identifier. This allows the user to perform unauthorized cross-fabric operations and view configuration details within tenants/Virtual Fabrics to which they have not been granted access.
Last activity 8 Oct 2026. Patch Forecast updates every hour.