Signals
Back to database
Schedule39High7.1VulnerabilityCVE-2026-87663No patch link observed

CVE-2026-87663 — An authentication bypass and command injection vulnerability exists in the inter-switch remote execution service of Brocade Fabric OS versions befo…

Published Oct 8, 2026, 05:17 AM UTCIngested 17h agoSource NVD(cve-db)CVE-2026-87663

Description

An authentication bypass and command injection vulnerability exists in the inter-switch remote execution service of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. When processing remote command execution IPC frames across the fabric, the receiving switch processes these commands at an elevated processing level without proper verification of transmitted parameters. This allows an attacker on a single fabric-connected switch to escalate privileges and execute arbitrary root commands locally or across other managed fabric members where remote execution functionality is enabled.

CVSS v4.0 base metrics

CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
7.1

High severity

Band computed from the CVSS base score, not the source's own label — so it means the same thing across every feed.

AV

Local

Attack Vector

AC

Low

Attack Complexity

AT

Present

Attack Requirements

PR

High

Privileges Required

UI

None

User Interaction

VC

High

Confidentiality (Vulnerable System)

VI

High

Integrity (Vulnerable System)

VA

High

Availability (Vulnerable System)

SC

None

Confidentiality (Subsequent System)

SI

None

Integrity (Subsequent System)

SA

None

Availability (Subsequent System)

References

Related threats

same CWE or vendor
Medium

CVE-2026-107336 — Malcolm's front nginx reverse proxy defines a "Dashboards → Arkime shortcut" location using a case-insensitive regex matcher but a case-sensitive r…

CVE-2026-107336 · 5h ago

High

CVE-2026-107589 — Insufficient job validation for service accounts in Jacamar CI prior to v0.30.0 allows authenticated CI users to generate arbitrary account names.

CVE-2026-107589 · 8h ago

Medium

CVE-2026-4894 — A vulnerability has been identified regarding insufficient validation in the Frappe Cloud/ERPNext authentication process, which allows multiple ema…

CVE-2026-4894 · 14h ago

Medium

CVE-2026-87686 — An authentication and access control bypass vulnerability exists in the web server management interface of Brocade Fabric OS versions before 10.0.1.

CVE-2026-87686 · 20h ago

Medium

CVE-2026-87670 — An authorization logic vulnerability exists in the Brocade Fabric OS versions before 10.0.1 REST API gateway.

CVE-2026-87670 · 20h ago

Medium

CVE-2026-92542 — The firewall rules which mark VXLAN datagrams for encryption indiscriminately match both authentic VXLAN datagrams sent from the kernel and forged …

CVE-2026-92542 · 1d ago