CVE-2026-87662Published

Brocade Fabric versions before 9.2.2d and 10.0.0 through 10.0.0a1 handling of specific download protocols utilizes unsanitized parameter strings. When processing upgrade requests, parameters are converted into system command strings and exe…

cve-program · CVE-2026-87662

Published

Fabric OS

Vendor product

Original vendor version evidence · not evaluated as a NuGet range

{
                    "vendor": "Brocade",
                    "product": "Fabric OS",
                    "versions": [
                        {
                            "status": "affected",
                            "version": "0",
                            "lessThan": "9.2.2d",
                            "versionType": "Brocade FabricOS"
                        },
                        {
                            "status": "affected",
                            "version": "10.0.0",
                            "lessThanOrEqual": "10.0.0a1",
                            "versionType": "Brocade FabricOS"
                        }
                    ],
                    "defaultStatus": "unaffected"
                }

Original source record · Cite this exact observation · Complete original publisher JSON