CVE-2026-87675: OS Command Injection
An OS command injection vulnerability exists in the configuration management subsystem of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. When performing a configuration download operation, the management daemon will relay configuration parameters, user-supplied relay host strings, and filenames directly to an internal utility script without sufficient character set validation. Because the local utility fails to sanitize shell metacharacters before processing them in a system shell command, a malicious or compromised configuration file can cause arbitrary operating system commands to be executed on a remote local switch when an administrator initiates a configuration download.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Brocade Fabric OSto a version that resolves this vulnerability.Fixed in 9.2.2d - Upgrade
Upgrade
Brocade Fabric OSto a version that resolves this vulnerability.Fixed in 10.0.1
Event History
Frequently Asked Questions
Which Fabric OS releases should be prioritized for review?
The affected ranges are releases before 9.2.2d and releases 10.0.0 through 10.0.0a1. Systems in these ranges that use configuration download operations should be prioritized.
Does exploitation require an unauthenticated remote attacker?
No. The CVSS vector indicates high privileges are required, and exploitation also depends on an administrator initiating a configuration download using a malicious or compromised configuration file. User interaction and an additional attack requirement are also indicated in the vector.
What configuration-download inputs can carry the injection payload?
The affected management flow passes configuration parameters, user-supplied relay host strings, and filenames to an internal utility script. Shell metacharacters in these inputs may be processed without sufficient validation or sanitization.
What is the potential effect on an affected switch?
A successful attack can execute arbitrary operating system commands on the remote local switch. The CVSS assessment indicates high impact to the vulnerable system's confidentiality, integrity, and availability.