Skip to content
Sign in
8.5 High

CVE-2026-87674 A local privilege escalation vulnerability exists in the system logging daemon of Brocade Fabric OS versions before…

Description

A local privilege escalation vulnerability exists in the system logging daemon of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. Insufficient access controls on internal inter-process communication (IPC) channels allow an unprivileged local user to submit malformed logging configurations. Due to improper input sanitization during configuration file generation, an attacker can inject arbitrary directives that execute with elevated privileges when the logging service reloads, leading to local privilege escalation.

Affected products and versions

Product Affected versions Fixed in
Fabric OS 10.0 10.0.0 → 10.0.0a1 No fix stated
Fabric OS 9.2 earliest → < 9.2.2d 9.2.2d

Other CVEs of Fabric OS

The 71 CVEs of Fabric OS →
CVE-2026-94585 An authentication bypass vulnerability exists in the web management interface of Brocade Fabric OS versions before… 7.7 High CVE-2026-94587 A buffer overflow vulnerability exists in the WebTools administrative interface handling configuration download or… 6.9 Medium CVE-2026-94579 An OS command injection vulnerability exists in the PAM (Pluggable Authentication Module) session cleanup routines… 5.4 Medium CVE-2026-94576 An authentication logic and privilege escalation vulnerability exists in the account management interface of Brocade… 5.9 Medium
Track this CVE