CVE-2026-87680: OS Command Injection
A command injection vulnerability in the REST API management interface of Brocade Fabric OS versions before 10.0.1 allows an authenticated user to execute arbitrary system commands via crafted input parameters.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Brocade Fabric OSto a version that resolves this vulnerability.Fixed in 10.0.1
Event History
Frequently Asked Questions
Who can exploit this vulnerability?
An attacker needs authenticated access to the REST API management interface. The advisory data does not indicate that unauthenticated users can exploit it.
Which systems are affected?
Brocade Fabric OS versions before 10.0.1 are affected. Systems running 10.0.1 or later are not identified as affected by the provided data.
What could a successful attacker do?
A low-privileged authenticated user can submit crafted REST API input parameters to execute arbitrary system commands. This can result in high impact to confidentiality and integrity.