7.0
Élevée
CVE-2026-87673 An OS command injection vulnerability exists in maintenance command-line diagnostic utilities on Brocade Fabric OS…
Description
An OS command injection vulnerability exists in maintenance command-line diagnostic utilities on Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. The binary fails to sanitize user-supplied input options when invoking underlying system commands through a shell interpreter. A privileged user with maintenance account access can exploit this issue by supplying crafted parameters, which results in arbitrary OS command execution with root privileges.
Produits et versions touchés
Autres CVE de Fabric OS
Les 71 CVE de Fabric OS →
CVE-2026-94585
An authentication bypass vulnerability exists in the web management interface of Brocade Fabric OS versions before…
7.7
Élevée
CVE-2026-94587
A buffer overflow vulnerability exists in the WebTools administrative interface handling configuration download or…
6.9
Moyenne
CVE-2026-94579
An OS command injection vulnerability exists in the PAM (Pluggable Authentication Module) session cleanup routines…
5.4
Moyenne
CVE-2026-94576
An authentication logic and privilege escalation vulnerability exists in the account management interface of Brocade…
5.9
Moyenne