← CVE Radar
CVE-2026-87659
A critical authorization bypass vulnerability exists in the Management Server handling of Brocade Fabric OS versions before 10.0.1. A compromised switch connected to the fabric can transmit crafted inband Fibre Channel vendor-unique CT (Common Transport) management requests to bypass administrative authentication. Successful exploitation allows an unauthorized peer switch to execute administrative actions on the target device, including resetting administrative passwords, initiating system reboots, and triggering firmware downloads.
7.1 HIGHEPSS 0.24%Not in KEVNVD: Analyzed
Overview
Severity
| Score | Severity | Version | Vector String |
|---|---|---|---|
| 7.1 | HIGH | 4.0brocade (CNA) | CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N |
| 9.8 | CRITICAL | 3.1NVD | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Details
- CVE ID
- CVE-2026-87659
- Status
- Analyzed
- Assigner (CNA)
- brocade
- Published
- Oct 8, 2026
- Last modified
- 2026-10-13 17:25 UTC
- Weaknesses
- CWE-306 · Missing Authentication for Critical Function
Affected Products
As published by the CNA in the CVE record.
BrocadeFabric OS1 version range
- before 10.0.1