CVE-2026-87668
Received Received - Intake

Stack-Based Buffer Overflow in Brocade Fabric OS

Publication date: 2026-10-08

Last updated on: 2026-10-08

Assigner: Brocade Communications Systems, LLC

Description
A stack-based buffer overflow vulnerability exists in the diagnostic execution utility of Brocade Fabric OS versions before 10.0.1. When processing command arguments for diagnostic operations, the utility tokenizes user-supplied input into an internal argument array without enforcing boundary checks on the maximum array capacity. An authenticated user with administrative access can exploit this vulnerability by supplying a crafted diagnostic command string containing an excessive number of tokenized arguments. This leads to a memory overwrite resulting in a denial of service (process crash).

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-08
Last Modified
2026-10-08
Generated
2026-10-08
AI Q&A
2026-10-08
EPSS Evaluated
N/A
NVD
CVE-2026-87668
EUVD
EUVD-2026-94679

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
Brocade Fabric OS 0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-121 A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a stack-based buffer overflow in Brocade Fabric OS versions before 10.0.1. It occurs in the diagnostic execution utility when processing command arguments. The utility tokenizes user input into an internal array without checking array size limits. An authenticated admin can exploit this by sending a diagnostic command with too many arguments, causing memory corruption that leads to a denial of service via process crash.

Detection Guidance

This vulnerability requires authenticated administrative access to exploit. Monitor diagnostic command execution logs for unusually long argument strings or repeated crashes in the diagnostic execution utility. Check for process crashes in Brocade Fabric OS versions before 10.0.1 during diagnostic operations.

Impact Analysis

An attacker with admin access could crash the diagnostic utility, disrupting system operations and causing downtime. This may lead to loss of visibility into system health and performance issues. The impact is limited to denial of service as no code execution or data theft is mentioned.

Compliance Impact

This vulnerability does not directly affect compliance with GDPR or HIPAA as it involves a denial of service in Brocade Fabric OS through a stack-based buffer overflow. However, if exploited, it could disrupt system availability, potentially impacting data processing or access required by these regulations.

Mitigation Strategies

Upgrade Brocade Fabric OS to version 10.0.1 or later immediately. Restrict administrative access to diagnostic utilities and limit command execution privileges. Monitor for suspicious diagnostic command usage patterns.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-87668. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart