A critical authorization bypass vulnerability exists in the Management Server handling of Brocade Fabric OS versions before 10.0.1.
A critical authorization bypass vulnerability exists in the Management Server handling of Brocade Fabric OS versions before 10.0.1. A compromised switch connected to the fabric can transmit crafted inband Fibre Channel vendor-unique CT (Common Transport) management requests to bypass administrative authentication. Successful exploitation allows an unauthorized peer switch to execute administrative actions on the target device, including resetting administrative passwords, initiating system reboots, and triggering firmware downloads.
Read at NIST National Vulnerability Database (CVE API 2.0)
- Vendor
- VMware (Broadcom)
- Product
- Brocade
- Exposure class
- Edge / VPN / firewall
Why it ranks 18 (Routine)
- Exposed product class: edge / VPN / firewall
- Widely deployed vendor product (VMware (Broadcom))
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.
Links
- NIST National Vulnerability Database (CVE API 2.0) (nvd.nist.gov)
- CVE-2026-87659 on this site · NVD · CVE.org · Vulnpedia