CVE-2026-87680Published

A command injection vulnerability in the REST API management interface of Brocade Fabric OS versions before 10.0.1 allows an authenticated user to execute arbitrary system commands via crafted input parameters.

Exact source revision recorded 23 Oct 2026 15:48:27 UTC. It does not establish the source's current position. Latest evidence.

Recorded JSON

cve-program · CVE-2026-87680

Published

Fabric OS

Vendor product

Original vendor version evidence · not evaluated as a NuGet range

{
                    "vendor": "Brocade",
                    "product": "Fabric OS",
                    "versions": [
                        {
                            "status": "affected",
                            "version": "0",
                            "lessThan": "10.0.1",
                            "versionType": "Brocade FabricOS"
                        }
                    ],
                    "defaultStatus": "unaffected"
                }

Original source record · Cite this exact observation · Complete original publisher JSON