CVE-2026-87668: Buffer Overflow
A stack-based buffer overflow vulnerability exists in the diagnostic execution utility of Brocade Fabric OS versions before 10.0.1. When processing command arguments for diagnostic operations, the utility tokenizes user-supplied input into an internal argument array without enforcing boundary checks on the maximum array capacity. An authenticated user with administrative access can exploit this vulnerability by supplying a crafted diagnostic command string containing an excessive number of tokenized arguments. This leads to a memory overwrite resulting in a denial of service (process crash).
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Brocade Fabric OSto a version that resolves this vulnerability.Fixed in 10.0.1
Event History
Frequently Asked Questions
Who can exploit this vulnerability?
Exploitation requires an authenticated user with administrative access to Brocade Fabric OS. The attacker must be able to invoke the diagnostic execution utility and submit a crafted diagnostic command.
What input is needed to trigger the issue?
The crafted diagnostic command must contain an excessive number of tokenized arguments. The utility does not enforce the maximum capacity of its internal argument array while processing those arguments.
What is the expected impact of successful exploitation?
Successful exploitation causes a memory overwrite that can crash the affected process, resulting in denial of service. The provided CVSS vector indicates no confidentiality impact and low integrity impact.
Which versions need remediation?
Brocade Fabric OS versions before 10.0.1 are affected. Updating to 10.0.1 or later addresses the affected version range described here.