← CVE Radar
CVE-2026-87684
A stack-based buffer overflow vulnerability exists in the SNMP daemon request handling of Brocade Fabric versions before 10.0.1. When processing an incoming SNMPv3 packet, an internal statistics gathering handler copies user-supplied context name data into a fixed-size buffer without properly validating the length of the string. A remote, unauthenticated attacker (under default configuration) can exploit this vulnerability by sending a specially crafted SNMPv3 packet, leading to memory corruption, daemon crash (Denial of Service), or potential arbitrary code execution.
8.7 HIGHEPSS 0.57%Not in KEVNVD: Analyzed
Overview
Severity
| Score | Severity | Version | Vector String |
|---|---|---|---|
| 8.7 | HIGH | 4.0brocade (CNA) | CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N |
| 9.8 | CRITICAL | 3.1NVD | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Details
- CVE ID
- CVE-2026-87684
- Status
- Analyzed
- Assigner (CNA)
- brocade
- Published
- Oct 8, 2026
- Last modified
- 2026-10-14 14:46 UTC
- Weaknesses
- CWE-121 · Stack-based Buffer Overflow
Affected Products
As published by the CNA in the CVE record.
BrocadeFabric OS1 version range
- before 10.0.1