CVE-2026-87688
Received Received - Intake

Certificate Management Command Injection in Brocade Fabric OS

Publication date: 2026-10-08

Last updated on: 2026-10-08

Assigner: Brocade Communications Systems, LLC

Description
An input validation vulnerability exists in the security certificate management component of the Brocade Fabric OS administrative management API. When processing certificate management operations, user-supplied certificate identifiers are handled without adequate sanitization prior to execution in external system routines. An authenticated attacker with privileges to perform certificate deletion requests can leverage this flaw to execute arbitrary system commands with the privileges of the underlying management daemon. This vulnerability affects Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-08
Last Modified
2026-10-08
Generated
2026-10-08
AI Q&A
2026-10-08
EPSS Evaluated
N/A
NVD
CVE-2026-87688
EUVD
EUVD-2026-94685

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
Brocade Fabric OS 0
Brocade Fabric OS 10.0.0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-77 The product constructs all or part of a command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended command when it is sent to a downstream component.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is an input validation flaw in Brocade Fabric OS's certificate management component. It allows authenticated attackers with certificate deletion privileges to execute arbitrary system commands via unsanitized certificate identifiers. The issue affects Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1.

Impact Analysis

An attacker could gain control of the management daemon, allowing them to execute malicious commands on the system. This could lead to unauthorized access, data breaches, or disruption of services if the system is compromised.

Compliance Impact

This vulnerability allows authenticated attackers to execute arbitrary system commands with high privileges, potentially leading to unauthorized access, data breaches, or system compromise. Such impacts could violate compliance requirements under GDPR (data protection) and HIPAA (healthcare data security) by exposing sensitive information or disrupting critical operations.

Mitigation Strategies

Upgrade Fabric OS to version 9.2.2d or later, or 10.0.0a2 or later if using version 10.0.0. Remove unnecessary administrative privileges for certificate management operations until patched.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-87688. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart