CVE-2026-87684
Received Received - Intake

Stack-Based Buffer Overflow in Brocade Fabric SNMP Daemon

Publication date: 2026-10-08

Last updated on: 2026-10-08

Assigner: Brocade Communications Systems, LLC

Description
A stack-based buffer overflow vulnerability exists in the SNMP daemon request handling of Brocade Fabric versions before 10.0.1. When processing an incoming SNMPv3 packet, an internal statistics gathering handler copies user-supplied context name data into a fixed-size buffer without properly validating the length of the string. A remote, unauthenticated attacker (under default configuration) can exploit this vulnerability by sending a specially crafted SNMPv3 packet, leading to memory corruption, daemon crash (Denial of Service), or potential arbitrary code execution.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-08
Last Modified
2026-10-08
Generated
2026-10-08
AI Q&A
2026-10-08
EPSS Evaluated
N/A
NVD
CVE-2026-87684
EUVD
EUVD-2026-94666

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
Brocade Fabric OS 0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-121 A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a stack-based buffer overflow in Brocade Fabric OS versions before 10.0.1. The SNMP daemon mishandles SNMPv3 packets by copying user-supplied context name data into a fixed-size buffer without length validation. This allows remote unauthenticated attackers to send crafted packets causing memory corruption, daemon crashes, or potential arbitrary code execution.

Detection Guidance

Detecting this vulnerability requires monitoring for SNMPv3 packet processing issues or crashes in Brocade Fabric OS versions before 10.0.1. Check for SNMP daemon crashes or unusual memory usage patterns. Use network monitoring tools to inspect SNMPv3 packets for malformed context names. No specific commands are provided in the context.

Impact Analysis

An attacker could exploit this to crash the SNMP daemon, causing a denial of service. In some cases, it may allow arbitrary code execution, potentially leading to full system compromise or unauthorized access to sensitive data.

Compliance Impact

This vulnerability could potentially impact compliance with GDPR and HIPAA by enabling unauthorized access or data breaches. A remote attacker could exploit the stack-based buffer overflow to execute arbitrary code, leading to unauthorized data access or manipulation. This may violate data protection requirements under GDPR (e.g., integrity and confidentiality principles) and HIPAA (e.g., safeguarding protected health information).

Mitigation Strategies

Upgrade Brocade Fabric OS to version 10.0.1 or later to address the stack-based buffer overflow. Disable SNMPv3 if not required, or restrict access to trusted sources. Monitor for unusual SNMP traffic or daemon crashes as indicators of exploitation attempts.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-87684. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart