CVE-2026-87681: High severity Brocade Fabric OS vulnerability
An Access Control Bypass vulnerability exists in the Role-Based Access Control (RBAC) validation engine of Brocade Fabric OS versions before 10.0.1. When processing certain management protocol operations, the RBAC engine incorrectly categorizes non-standard action opcodes during permission checks. This allows authenticated users with read-only management privileges to bypass access controls and execute restricted administrative operations.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Brocade Fabric OSto a version that resolves this vulnerability.Fixed in 10.0.1
Event History
Frequently Asked Questions
Who can exploit this issue?
Authenticated users who have read-only management privileges can exploit the issue. It affects Brocade Fabric OS versions before 10.0.1 when certain management protocol operations are processed.
What level of access can an attacker gain through exploitation?
An attacker can bypass RBAC permission checks and execute restricted administrative operations despite having only read-only management privileges. The vulnerability affects confidentiality, integrity, and availability.
What version should be used to remediate the issue?
Upgrade Brocade Fabric OS to version 10.0.1 or later. Versions before 10.0.1 are affected.