CVE-2026-87660

Analyzed Analyzed - Analysis Complete

BaseFortify

Publication date: 2026-10-08

Last updated on: 2026-10-14

Assigner: Brocade Communications Systems, LLC

Description

An improper file permission and missing authorization vulnerability exists in the diagnostic kernel module subsystem of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. An unprivileged local user can invoke privileged hardware tests, force system error conditions, reset hardware blades, or disrupt storage fabric operations.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-08

Last Modified

2026-10-14

Generated

2026-10-19

AI Q&A

2026-10-08

EPSS Evaluated

2026-10-18

NVD

CVE-2026-87660

EUVD

EUVD-2026-94697

Affected Vendors & Products

Vendor	Product	Version / Range
broadcom	fabric_operating_system	to 9.2.2d (exc)
broadcom	fabric_operating_system	From 10.0.0 (inc) to 10.0.1 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-732	The product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors.

Attack-Flow Graph

Executive Summary

This vulnerability is an improper file permission and missing authorization issue in Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. It allows an unprivileged local user to run privileged hardware tests, trigger system errors, reset hardware blades, or disrupt storage fabric operations.

Detection Guidance

Detection involves checking for improper file permissions in the diagnostic kernel module subsystem. Review file permissions in /dev or /proc for kernel modules related to Brocade Fabric OS. Use commands like ls -la /dev/brocade* or ls -la /proc/driver/brocade* to inspect access rights. Verify if unprivileged users can invoke privileged hardware tests.

Impact Analysis

An attacker with local access could cause system instability, hardware resets, or fabric disruptions, potentially leading to data loss or service outages in storage environments using affected Brocade Fabric OS versions.

Compliance Impact

This vulnerability could lead to unauthorized access or disruptions in storage systems, potentially violating data integrity and availability requirements in GDPR and HIPAA. Compliance may be impacted if systems are not patched, as unauthorized changes could result in data breaches or service disruptions.

Mitigation Strategies

Upgrade Brocade Fabric OS to version 9.2.2d or later, or 10.0.0a2 or later. Remove unnecessary permissions for local users to invoke privileged hardware tests. Restrict access to diagnostic kernel module functions.

Hi! I’m here to help you understand CVE-2026-87660. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70