NCSC-2026-0432
Vulnerability from csaf_ncscnl - Published: 2026-10-16 06:23 - Updated: 2026-10-16 06:23Summary
Kwetsbaarheden verholpen in HPE Brocade Fabric OS
Notes
The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions:
NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein.
NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory.
This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings.
Feiten: HPE heeft meerdere beveiligingsproblemen verholpen in Brocade Fabric OS, specifiek in versies vóór 10.0.1 en in de 9.2.x en 10.0.x release lijnen.
Interpretaties: De kwetsbaarheden omvatten onder andere authenticatieomzeiling, denial of service, informatielekken, privilege-escalatie, buffer overflows, command injection, en arbitrary code execution. Aanvallers kunnen via verschillende aanvalsvectoren, zoals speciaal vervaardigde managementverzoeken, REST API-aanroepen, web management interfaces, en configuratiebestanden, ongeautoriseerde administratieve acties uitvoeren, root-commando's lokaal of op andere fabric-leden uitvoeren, en systeemprocessen laten crashen.
Sommige kwetsbaarheden maken het mogelijk om sessiecontext te vervalsen, HTTP-headers te spoofen, en gevoelige systeem- en monitoringdata in te zien zonder juiste rechten. Daarnaast zijn er race conditions en thread-safety problemen die leiden tot onjuiste toegangscontrole en audit logging. Specifieke componenten zoals de diagnostic kernel module, IKEv2 protocol handler, WebTools interface, en REST API zijn betrokken bij deze kwetsbaarheden.
Sommige problemen vereisen geauthenticeerde toegang, terwijl andere ook door niet-geauthenticeerde, netwerknabije aanvallers kunnen worden misbruikt. De kwetsbaarheden beïnvloeden de integriteit, vertrouwelijkheid en beschikbaarheid van de fabric operating system omgeving en de onderliggende netwerk- en opslaginfrastructuur.
Oplossingen: HPE heeft updates uitgebracht om de kwetsbaarheden in Brocade Fabric OS te verhelpen. Zie bijgevoegde referenties voor meer informatie.
Kans: medium
Schade: high
CWE-15: External Control of System or Configuration Setting
CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection')
CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CWE-88: Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')
CWE-93: Improper Neutralization of CRLF Sequences ('CRLF Injection')
CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
CWE-121: Stack-based Buffer Overflow
CWE-122: Heap-based Buffer Overflow
CWE-125: Out-of-bounds Read
CWE-187: Partial String Comparison
CWE-288: Authentication Bypass Using an Alternate Path or Channel
CWE-290: Authentication Bypass by Spoofing
CWE-306: Missing Authentication for Critical Function
CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CWE-483: Incorrect Block Delimitation
CWE-532: Insertion of Sensitive Information into Log File
CWE-732: Incorrect Permission Assignment for Critical Resource
CWE-862: Missing Authorization
HPE Brocade Fabric OS versions prior to 10.0.1 contain multiple critical security vulnerabilities, including an authorization bypass that enables compromised switches to perform unauthorized administrative actions.
9.8 (Critical)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Broadcom / Fabric OS
|
vers:unknown/* | ||
|
vers:unknown/*
HPE / Brocade Fabric OS
|
vers:unknown/* |
Multiple vulnerabilities in HPE Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 allow privilege escalation, arbitrary code execution, access bypass, and unauthorized hardware testing via improper permissions and missing authorization.
7.3 (High)
Affected products
Known affected
2 products, the same list as for
CVE-2026-87659
Multiple security vulnerabilities in HPE Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 allow access restriction bypass, arbitrary code execution, privilege escalation, buffer overflow, and persistent denial of service via corrupted Apache configuration data.
5.7 (Medium)
Affected products
Known affected
2 products, the same list as for
CVE-2026-87659
Multiple critical vulnerabilities in HPE Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 allow authentication bypass, command injection, privilege escalation, arbitrary code execution, and buffer overflow.
6.7 (Medium)
Affected products
Known affected
2 products, the same list as for
CVE-2026-87659
HPE Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 contain multiple vulnerabilities including session context forgery, enabling privilege escalation, arbitrary code execution, and buffer overflow.
7.8 (High)
Affected products
Known affected
2 products, the same list as for
CVE-2026-87659
Multiple vulnerabilities in HPE Brocade Fabric OS versions before 10.0.1 include authentication bypass, denial of service via a stack-based buffer overflow in the IKEv2 protocol handler, information disclosure, and privilege escalation.
7.5 (High)
Affected products
Known affected
2 products, the same list as for
CVE-2026-87659
HPE Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 contain multiple critical vulnerabilities including command injection, privilege escalation, and buffer overflow that allow low-privilege users to execute arbitrary code with elevated privileges.
8.0 (High)
Affected products
Known affected
2 products, the same list as for
CVE-2026-87659
Multiple vulnerabilities in HPE Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 enable access restriction bypass, arbitrary code execution, privilege escalation, buffer overflow, and unauthorized local file reading via CLI argument injection.
4.5 (Medium)
Affected products
Known affected
2 products, the same list as for
CVE-2026-87659
HPE Brocade Fabric OS versions prior to 10.0.1 contain multiple security vulnerabilities including authentication bypass, information disclosure, privilege escalation, and a stack-based buffer overflow in the diagnostic utility exploitable by authenticated admin users causing denial of service.
6.5 (Medium)
Affected products
Known affected
2 products, the same list as for
CVE-2026-87659
HPE Brocade Fabric OS versions prior to 10.0.1 contain multiple security vulnerabilities including authentication bypass, denial of service, information disclosure, privilege escalation, and a missing authorization check in the REST API exposing sensitive monitoring data.
4.3 (Medium)
Affected products
Known affected
2 products, the same list as for
CVE-2026-87659
Multiple security vulnerabilities in HPE Brocade Fabric OS versions before 10.0.1, including authentication bypass and REST API gateway HTTP header spoofing, allow unauthorized access to sensitive management endpoints and potential privilege escalation.
4.3 (Medium)
Affected products
Known affected
2 products, the same list as for
CVE-2026-87659
HPE Brocade Fabric OS versions prior to 10.0.1 contain multiple security vulnerabilities including authentication bypass, denial of service via out-of-bounds memory read in the web management daemon, information disclosure, and privilege escalation.
7.5 (High)
Affected products
Known affected
2 products, the same list as for
CVE-2026-87659
HPE Brocade Fabric OS versions prior to 10.0.1 contain multiple critical vulnerabilities including authentication bypass, denial of service, privilege escalation, and an information disclosure flaw exposing cleartext proxy credentials via SupportLink diagnostic utilities.
5.5 (Medium)
Affected products
Known affected
2 products, the same list as for
CVE-2026-87659
Multiple critical vulnerabilities in HPE Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 allow access restriction bypass, arbitrary code execution, privilege escalation, and OS command injection via maintenance utilities.
7.2 (High)
Affected products
Known affected
2 products, the same list as for
CVE-2026-87659
Multiple vulnerabilities in HPE Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 allow access restriction bypass, arbitrary code execution, privilege escalation, and buffer overflow via insufficient input sanitization and IPC channel exploitation.
7.8 (High)
Affected products
Known affected
2 products, the same list as for
CVE-2026-87659
HPE Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 contain multiple critical vulnerabilities including OS command injection, privilege escalation, and buffer overflow that allow remote arbitrary code execution and access bypass.
6.8 (Medium)
Affected products
Known affected
2 products, the same list as for
CVE-2026-87659
A stack-based buffer overflow in Brocade Fabric OS before version 10.0.1 allows an authenticated admin to cause a denial-of-service by importing a crafted X.509 certificate with an oversized Authority Key Identifier extension.
5.7 (Medium)
Affected products
Known affected
2 products, the same list as for
CVE-2026-87659
Multiple vulnerabilities in HPE Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 include OS command injection, buffer overflow, privilege escalation, and access restriction bypass.
6.6 (Medium)
Affected products
Known affected
2 products, the same list as for
CVE-2026-87659
A vulnerability in Brocade Fabric OS versions prior to 10.0.1 allows authenticated administrators to inject arbitrary web server directives via the Federated Authentication Identity Provider issuer parameter, potentially disrupting service or altering security controls.
5.2 (Medium)
Affected products
Known affected
2 products, the same list as for
CVE-2026-87659
Brocade Fabric OS versions prior to 10.0.1 contain a vulnerability in trunk configuration processing that allows authenticated administrators to cause heap corruption or execute arbitrary code via crafted REST API requests with excessive list delimiters.
7.2 (High)
Affected products
Known affected
2 products, the same list as for
CVE-2026-87659
Multiple security vulnerabilities in HPE Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 allow authenticated attackers with certificate deletion privileges to bypass access restrictions, execute arbitrary code, escalate privileges, and cause buffer overflows.
6.8 (Medium)
Affected products
Known affected
2 products, the same list as for
CVE-2026-87659
HPE Brocade Fabric OS versions prior to 10.0.1 contain multiple security vulnerabilities, including a logic flaw that allows authenticated low-privileged users to bypass RBAC and access restricted administrative settings.
5.7 (Medium)
Affected products
Known affected
2 products, the same list as for
CVE-2026-87659
Multiple vulnerabilities in HPE Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 allow access restriction bypass, arbitrary code execution, privilege escalation, and buffer overflow via account management interface flaws.
8.0 (High)
Affected products
Known affected
2 products, the same list as for
CVE-2026-87659
Multiple security vulnerabilities in HPE Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 allow privilege escalation, access bypass, arbitrary code execution, and buffer overflow.
7.8 (High)
Affected products
Known affected
2 products, the same list as for
CVE-2026-87659
HPE Brocade Fabric OS versions before 10.0.1 contain multiple critical vulnerabilities including an authorization logic flaw in the AAA framework that enables remote authenticated users to bypass admin restrictions and gain root-equivalent access.
8.8 (High)
Affected products
Known affected
2 products, the same list as for
CVE-2026-87659
An OS command injection vulnerability in Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 allows authenticated users with shell metacharacters in their username or profile identifier to execute arbitrary commands as root upon SSH session termination.
8.0 (High)
Affected products
Known affected
2 products, the same list as for
CVE-2026-87659
HPE Brocade Fabric OS versions prior to 10.0.1 have multiple critical vulnerabilities including authentication bypass, denial of service, information disclosure, privilege escalation, and a REST API USB management flaw allowing authenticated users with USB privileges to delete arbitrary files.
4.5 (Medium)
Affected products
Known affected
2 products, the same list as for
CVE-2026-87659
An OS command injection vulnerability in Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 allows authenticated, high-privileged attackers to execute arbitrary root-level commands via the REST API by exploiting SSH known host settings.
6.8 (Medium)
Affected products
Known affected
2 products, the same list as for
CVE-2026-87659
Multiple security vulnerabilities in HPE Brocade Fabric OS versions before 10.0.1 include authentication bypass, denial of service, information disclosure, privilege escalation, and a memory buffer overflow in the Fabric Shortest Path First protocol causing daemon crashes or arbitrary code execution.
7.8 (High)
Affected products
Known affected
2 products, the same list as for
CVE-2026-87659
HPE Brocade Fabric OS versions prior to 10.0.1 contain multiple security vulnerabilities including authentication bypass, denial of service, privilege escalation, and a race condition in the REST management interface causing sensitive data leakage.
CWE-362 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')Affected products
Known affected
2 products, the same list as for
CVE-2026-87659
HPE Brocade Fabric OS versions prior to 10.0.1 contain multiple security vulnerabilities including authentication bypass, denial of service, information disclosure, privilege escalation, and a race condition causing incorrect client IP handling and audit log inaccuracies.
CWE-362 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')Affected products
Known affected
2 products, the same list as for
CVE-2026-87659
An authentication bypass vulnerability in Brocade Fabric OS versions prior to 9.2.2d on the MXG610 platform enables an unauthenticated, network-adjacent attacker to gain administrative access via the Single Sign-On workflow.
8.8 (High)
Affected products
Known affected
2 products, the same list as for
CVE-2026-87659
A command injection vulnerability in Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 allows authenticated users with configuration download permissions to execute arbitrary root-level commands via the WebTools interface.
6.8 (Medium)
Affected products
Known affected
2 products, the same list as for
CVE-2026-87659
A buffer overflow vulnerability in Brocade Fabric OS WebTools administrative interface versions before 9.2.2d and 10.0.0 through 10.0.0a1 allows authenticated users with configuration download permissions to crash the weblinker daemon.
4.5 (Medium)
Affected products
Known affected
2 products, the same list as for
CVE-2026-87659
References
68 references
{
"document": {
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"tlp": {
"label": "WHITE"
}
},
"lang": "nl",
"notes": [
{
"category": "legal_disclaimer",
"text": "The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions:\n\n NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein.\n\n NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory.\n This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings."
},
{
"category": "description",
"text": "HPE heeft meerdere beveiligingsproblemen verholpen in Brocade Fabric OS, specifiek in versies v\u00f3\u00f3r 10.0.1 en in de 9.2.x en 10.0.x release lijnen.",
"title": "Feiten"
},
{
"category": "description",
"text": "De kwetsbaarheden omvatten onder andere authenticatieomzeiling, denial of service, informatielekken, privilege-escalatie, buffer overflows, command injection, en arbitrary code execution. Aanvallers kunnen via verschillende aanvalsvectoren, zoals speciaal vervaardigde managementverzoeken, REST API-aanroepen, web management interfaces, en configuratiebestanden, ongeautoriseerde administratieve acties uitvoeren, root-commando\u0027s lokaal of op andere fabric-leden uitvoeren, en systeemprocessen laten crashen.\n\nSommige kwetsbaarheden maken het mogelijk om sessiecontext te vervalsen, HTTP-headers te spoofen, en gevoelige systeem- en monitoringdata in te zien zonder juiste rechten. Daarnaast zijn er race conditions en thread-safety problemen die leiden tot onjuiste toegangscontrole en audit logging. Specifieke componenten zoals de diagnostic kernel module, IKEv2 protocol handler, WebTools interface, en REST API zijn betrokken bij deze kwetsbaarheden.\n\nSommige problemen vereisen geauthenticeerde toegang, terwijl andere ook door niet-geauthenticeerde, netwerknabije aanvallers kunnen worden misbruikt. De kwetsbaarheden be\u00efnvloeden de integriteit, vertrouwelijkheid en beschikbaarheid van de fabric operating system omgeving en de onderliggende netwerk- en opslaginfrastructuur.",
"title": "Interpretaties"
},
{
"category": "description",
"text": "HPE heeft updates uitgebracht om de kwetsbaarheden in Brocade Fabric OS te verhelpen. Zie bijgevoegde referenties voor meer informatie.",
"title": "Oplossingen"
},
{
"category": "general",
"text": "medium",
"title": "Kans"
},
{
"category": "general",
"text": "high",
"title": "Schade"
},
{
"category": "general",
"text": "External Control of System or Configuration Setting",
"title": "CWE-15"
},
{
"category": "general",
"text": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)",
"title": "CWE-22"
},
{
"category": "general",
"text": "Improper Neutralization of Special Elements used in a Command (\u0027Command Injection\u0027)",
"title": "CWE-77"
},
{
"category": "general",
"text": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
"title": "CWE-78"
},
{
"category": "general",
"text": "Improper Neutralization of Argument Delimiters in a Command (\u0027Argument Injection\u0027)",
"title": "CWE-88"
},
{
"category": "general",
"text": "Improper Neutralization of CRLF Sequences (\u0027CRLF Injection\u0027)",
"title": "CWE-93"
},
{
"category": "general",
"text": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)",
"title": "CWE-120"
},
{
"category": "general",
"text": "Stack-based Buffer Overflow",
"title": "CWE-121"
},
{
"category": "general",
"text": "Heap-based Buffer Overflow",
"title": "CWE-122"
},
{
"category": "general",
"text": "Out-of-bounds Read",
"title": "CWE-125"
},
{
"category": "general",
"text": "Partial String Comparison",
"title": "CWE-187"
},
{
"category": "general",
"text": "Authentication Bypass Using an Alternate Path or Channel",
"title": "CWE-288"
},
{
"category": "general",
"text": "Authentication Bypass by Spoofing",
"title": "CWE-290"
},
{
"category": "general",
"text": "Missing Authentication for Critical Function",
"title": "CWE-306"
},
{
"category": "general",
"text": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)",
"title": "CWE-362"
},
{
"category": "general",
"text": "Incorrect Block Delimitation",
"title": "CWE-483"
},
{
"category": "general",
"text": "Insertion of Sensitive Information into Log File",
"title": "CWE-532"
},
{
"category": "general",
"text": "Incorrect Permission Assignment for Critical Resource",
"title": "CWE-732"
},
{
"category": "general",
"text": "Missing Authorization",
"title": "CWE-862"
}
],
"publisher": {
"category": "coordinator",
"contact_details": "cert@ncsc.nl",
"name": "Nationaal Cyber Security Centrum",
"namespace": "https://www.ncsc.nl/"
},
"references": [
{
"category": "external",
"summary": "Reference",
"url": "https://support.broadcom.com/external/content/SecurityAdvisories/0/39072"
},
{
"category": "external",
"summary": "Reference",
"url": "https://support.broadcom.com/external/content/SecurityAdvisories/0/39073"
},
{
"category": "external",
"summary": "Reference",
"url": "https://support.broadcom.com/external/content/SecurityAdvisories/0/39082"
},
{
"category": "external",
"summary": "Reference",
"url": "https://support.broadcom.com/external/content/SecurityAdvisories/0/39131"
},
{
"category": "external",
"summary": "Reference",
"url": "https://support.broadcom.com/external/content/SecurityAdvisories/0/39134"
},
{
"category": "external",
"summary": "Reference",
"url": "https://support.broadcom.com/external/content/SecurityAdvisories/0/39135"
},
{
"category": "external",
"summary": "Reference",
"url": "https://support.broadcom.com/external/content/SecurityAdvisories/0/39136"
},
{
"category": "external",
"summary": "Reference",
"url": "https://support.broadcom.com/external/content/SecurityAdvisories/0/39137"
},
{
"category": "external",
"summary": "Reference",
"url": "https://support.broadcom.com/external/content/SecurityAdvisories/0/39138"
},
{
"category": "external",
"summary": "Reference",
"url": "https://support.broadcom.com/external/content/SecurityAdvisories/0/39139"
},
{
"category": "external",
"summary": "Reference",
"url": "https://support.broadcom.com/external/content/SecurityAdvisories/0/39140"
},
{
"category": "external",
"summary": "Reference",
"url": "https://support.broadcom.com/external/content/SecurityAdvisories/0/39141"
},
{
"category": "external",
"summary": "Reference",
"url": "https://support.broadcom.com/external/content/SecurityAdvisories/0/39142"
},
{
"category": "external",
"summary": "Reference",
"url": "https://support.broadcom.com/external/content/SecurityAdvisories/0/39143"
},
{
"category": "external",
"summary": "Reference",
"url": "https://support.broadcom.com/external/content/SecurityAdvisories/0/39144"
},
{
"category": "external",
"summary": "Reference",
"url": "https://support.broadcom.com/external/content/SecurityAdvisories/0/39145"
},
{
"category": "external",
"summary": "Reference",
"url": "https://support.broadcom.com/external/content/SecurityAdvisories/0/39146"
},
{
"category": "external",
"summary": "Reference",
"url": "https://support.broadcom.com/external/content/SecurityAdvisories/0/39147"
},
{
"category": "external",
"summary": "Reference",
"url": "https://support.broadcom.com/external/content/SecurityAdvisories/0/39148"
},
{
"category": "external",
"summary": "Reference",
"url": "https://support.broadcom.com/external/content/SecurityAdvisories/0/39149"
},
{
"category": "external",
"summary": "Reference",
"url": "https://support.broadcom.com/external/content/SecurityAdvisories/0/39150"
},
{
"category": "external",
"summary": "Reference",
"url": "https://support.broadcom.com/external/content/SecurityAdvisories/0/39151"
},
{
"category": "external",
"summary": "Reference",
"url": "https://support.broadcom.com/external/content/SecurityAdvisories/0/39152"
},
{
"category": "external",
"summary": "Reference",
"url": "https://support.broadcom.com/external/content/SecurityAdvisories/0/39153"
},
{
"category": "external",
"summary": "Reference",
"url": "https://support.broadcom.com/external/content/SecurityAdvisories/0/39154"
},
{
"category": "external",
"summary": "Reference",
"url": "https://support.broadcom.com/external/content/SecurityAdvisories/0/39155"
},
{
"category": "external",
"summary": "Reference",
"url": "https://support.broadcom.com/external/content/SecurityAdvisories/0/39156"
},
{
"category": "external",
"summary": "Reference",
"url": "https://support.broadcom.com/external/content/SecurityAdvisories/0/39157"
},
{
"category": "external",
"summary": "Reference",
"url": "https://support.broadcom.com/external/content/SecurityAdvisories/0/39158"
},
{
"category": "external",
"summary": "Reference",
"url": "https://support.broadcom.com/external/content/SecurityAdvisories/0/39159"
},
{
"category": "external",
"summary": "Reference",
"url": "https://support.broadcom.com/external/content/SecurityAdvisories/0/39160"
},
{
"category": "external",
"summary": "Reference",
"url": "https://support.broadcom.com/external/content/SecurityAdvisories/0/39161"
},
{
"category": "external",
"summary": "Reference",
"url": "https://support.broadcom.com/external/content/SecurityAdvisories/0/39163"
},
{
"category": "external",
"summary": "Reference",
"url": "https://support.broadcom.com/external/content/SecurityAdvisories/0/39164"
}
],
"title": "Kwetsbaarheden verholpen in HPE Brocade Fabric OS",
"tracking": {
"current_release_date": "2026-10-16T06:23:02.321535Z",
"generator": {
"date": "2025-08-04T16:30:00Z",
"engine": {
"name": "V.A.",
"version": "1.3"
}
},
"id": "NCSC-2026-0432",
"initial_release_date": "2026-10-16T06:23:02.321535Z",
"revision_history": [
{
"date": "2026-10-16T06:23:02.321535Z",
"number": "1.0.0",
"summary": "Initiele versie"
}
],
"status": "final",
"version": "1.0.0"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-1"
}
}
],
"category": "product_name",
"name": "Fabric OS"
}
],
"category": "vendor",
"name": "Broadcom"
},
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-2"
}
}
],
"category": "product_name",
"name": "Brocade Fabric OS"
}
],
"category": "vendor",
"name": "HPE"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-87659",
"cwe": {
"id": "CWE-306",
"name": "Missing Authentication for Critical Function"
},
"notes": [
{
"category": "other",
"text": "Missing Authentication for Critical Function",
"title": "CWE-306"
},
{
"category": "description",
"text": "HPE Brocade Fabric OS versions prior to 10.0.1 contain multiple critical security vulnerabilities, including an authorization bypass that enables compromised switches to perform unauthorized administrative actions.",
"title": "Summary"
},
{
"category": "general",
"text": "CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-87659 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-87659.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-87659"
},
{
"cve": "CVE-2026-87660",
"cwe": {
"id": "CWE-732",
"name": "Incorrect Permission Assignment for Critical Resource"
},
"notes": [
{
"category": "other",
"text": "Incorrect Permission Assignment for Critical Resource",
"title": "CWE-732"
},
{
"category": "description",
"text": "Multiple vulnerabilities in HPE Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 allow privilege escalation, arbitrary code execution, access bypass, and unauthorized hardware testing via improper permissions and missing authorization.",
"title": "Summary"
},
{
"category": "general",
"text": "CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-87660 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-87660.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-87660"
},
{
"cve": "CVE-2026-87661",
"cwe": {
"id": "CWE-93",
"name": "Improper Neutralization of CRLF Sequences (\u0027CRLF Injection\u0027)"
},
"notes": [
{
"category": "other",
"text": "Improper Neutralization of CRLF Sequences (\u0027CRLF Injection\u0027)",
"title": "CWE-93"
},
{
"category": "description",
"text": "Multiple security vulnerabilities in HPE Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 allow access restriction bypass, arbitrary code execution, privilege escalation, buffer overflow, and persistent denial of service via corrupted Apache configuration data.",
"title": "Summary"
},
{
"category": "general",
"text": "CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-87661 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-87661.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-87661"
},
{
"cve": "CVE-2026-87663",
"cwe": {
"id": "CWE-290",
"name": "Authentication Bypass by Spoofing"
},
"notes": [
{
"category": "other",
"text": "Authentication Bypass by Spoofing",
"title": "CWE-290"
},
{
"category": "description",
"text": "Multiple critical vulnerabilities in HPE Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 allow authentication bypass, command injection, privilege escalation, arbitrary code execution, and buffer overflow.",
"title": "Summary"
},
{
"category": "general",
"text": "CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-87663 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-87663.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-87663"
},
{
"cve": "CVE-2026-87664",
"cwe": {
"id": "CWE-306",
"name": "Missing Authentication for Critical Function"
},
"notes": [
{
"category": "other",
"text": "Missing Authentication for Critical Function",
"title": "CWE-306"
},
{
"category": "description",
"text": "HPE Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 contain multiple vulnerabilities including session context forgery, enabling privilege escalation, arbitrary code execution, and buffer overflow.",
"title": "Summary"
},
{
"category": "general",
"text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-87664 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-87664.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-87664"
},
{
"cve": "CVE-2026-87665",
"cwe": {
"id": "CWE-121",
"name": "Stack-based Buffer Overflow"
},
"notes": [
{
"category": "other",
"text": "Stack-based Buffer Overflow",
"title": "CWE-121"
},
{
"category": "description",
"text": "Multiple vulnerabilities in HPE Brocade Fabric OS versions before 10.0.1 include authentication bypass, denial of service via a stack-based buffer overflow in the IKEv2 protocol handler, information disclosure, and privilege escalation.",
"title": "Summary"
},
{
"category": "general",
"text": "CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-87665 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-87665.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-87665"
},
{
"cve": "CVE-2026-87666",
"cwe": {
"id": "CWE-78",
"name": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)"
},
"notes": [
{
"category": "other",
"text": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
"title": "CWE-78"
},
{
"category": "description",
"text": "HPE Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 contain multiple critical vulnerabilities including command injection, privilege escalation, and buffer overflow that allow low-privilege users to execute arbitrary code with elevated privileges.",
"title": "Summary"
},
{
"category": "general",
"text": "CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-87666 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-87666.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.0,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-87666"
},
{
"cve": "CVE-2026-87667",
"cwe": {
"id": "CWE-88",
"name": "Improper Neutralization of Argument Delimiters in a Command (\u0027Argument Injection\u0027)"
},
"notes": [
{
"category": "other",
"text": "Improper Neutralization of Argument Delimiters in a Command (\u0027Argument Injection\u0027)",
"title": "CWE-88"
},
{
"category": "description",
"text": "Multiple vulnerabilities in HPE Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 enable access restriction bypass, arbitrary code execution, privilege escalation, buffer overflow, and unauthorized local file reading via CLI argument injection.",
"title": "Summary"
},
{
"category": "general",
"text": "CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-87667 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-87667.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-87667"
},
{
"cve": "CVE-2026-87668",
"cwe": {
"id": "CWE-121",
"name": "Stack-based Buffer Overflow"
},
"notes": [
{
"category": "other",
"text": "Stack-based Buffer Overflow",
"title": "CWE-121"
},
{
"category": "description",
"text": "HPE Brocade Fabric OS versions prior to 10.0.1 contain multiple security vulnerabilities including authentication bypass, information disclosure, privilege escalation, and a stack-based buffer overflow in the diagnostic utility exploitable by authenticated admin users causing denial of service.",
"title": "Summary"
},
{
"category": "general",
"text": "CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-87668 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-87668.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-87668"
},
{
"cve": "CVE-2026-87669",
"cwe": {
"id": "CWE-862",
"name": "Missing Authorization"
},
"notes": [
{
"category": "other",
"text": "Missing Authorization",
"title": "CWE-862"
},
{
"category": "description",
"text": "HPE Brocade Fabric OS versions prior to 10.0.1 contain multiple security vulnerabilities including authentication bypass, denial of service, information disclosure, privilege escalation, and a missing authorization check in the REST API exposing sensitive monitoring data.",
"title": "Summary"
},
{
"category": "general",
"text": "CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-87669 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-87669.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-87669"
},
{
"cve": "CVE-2026-87670",
"cwe": {
"id": "CWE-290",
"name": "Authentication Bypass by Spoofing"
},
"notes": [
{
"category": "other",
"text": "Authentication Bypass by Spoofing",
"title": "CWE-290"
},
{
"category": "description",
"text": "Multiple security vulnerabilities in HPE Brocade Fabric OS versions before 10.0.1, including authentication bypass and REST API gateway HTTP header spoofing, allow unauthorized access to sensitive management endpoints and potential privilege escalation.",
"title": "Summary"
},
{
"category": "general",
"text": "CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-87670 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-87670.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-87670"
},
{
"cve": "CVE-2026-87671",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"notes": [
{
"category": "other",
"text": "Out-of-bounds Read",
"title": "CWE-125"
},
{
"category": "description",
"text": "HPE Brocade Fabric OS versions prior to 10.0.1 contain multiple security vulnerabilities including authentication bypass, denial of service via out-of-bounds memory read in the web management daemon, information disclosure, and privilege escalation.",
"title": "Summary"
},
{
"category": "general",
"text": "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-87671 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-87671.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-87671"
},
{
"cve": "CVE-2026-87672",
"cwe": {
"id": "CWE-532",
"name": "Insertion of Sensitive Information into Log File"
},
"notes": [
{
"category": "other",
"text": "Insertion of Sensitive Information into Log File",
"title": "CWE-532"
},
{
"category": "description",
"text": "HPE Brocade Fabric OS versions prior to 10.0.1 contain multiple critical vulnerabilities including authentication bypass, denial of service, privilege escalation, and an information disclosure flaw exposing cleartext proxy credentials via SupportLink diagnostic utilities.",
"title": "Summary"
},
{
"category": "general",
"text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-87672 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-87672.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-87672"
},
{
"cve": "CVE-2026-87673",
"cwe": {
"id": "CWE-78",
"name": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)"
},
"notes": [
{
"category": "other",
"text": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
"title": "CWE-78"
},
{
"category": "description",
"text": "Multiple critical vulnerabilities in HPE Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 allow access restriction bypass, arbitrary code execution, privilege escalation, and OS command injection via maintenance utilities.",
"title": "Summary"
},
{
"category": "general",
"text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-87673 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-87673.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.2,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-87673"
},
{
"cve": "CVE-2026-87674",
"cwe": {
"id": "CWE-78",
"name": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)"
},
"notes": [
{
"category": "other",
"text": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
"title": "CWE-78"
},
{
"category": "description",
"text": "Multiple vulnerabilities in HPE Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 allow access restriction bypass, arbitrary code execution, privilege escalation, and buffer overflow via insufficient input sanitization and IPC channel exploitation.",
"title": "Summary"
},
{
"category": "general",
"text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-87674 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-87674.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-87674"
},
{
"cve": "CVE-2026-87675",
"cwe": {
"id": "CWE-78",
"name": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)"
},
"notes": [
{
"category": "other",
"text": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
"title": "CWE-78"
},
{
"category": "description",
"text": "HPE Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 contain multiple critical vulnerabilities including OS command injection, privilege escalation, and buffer overflow that allow remote arbitrary code execution and access bypass.",
"title": "Summary"
},
{
"category": "general",
"text": "CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-87675 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-87675.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-87675"
},
{
"cve": "CVE-2026-87676",
"cwe": {
"id": "CWE-121",
"name": "Stack-based Buffer Overflow"
},
"notes": [
{
"category": "other",
"text": "Stack-based Buffer Overflow",
"title": "CWE-121"
},
{
"category": "description",
"text": "A stack-based buffer overflow in Brocade Fabric OS before version 10.0.1 allows an authenticated admin to cause a denial-of-service by importing a crafted X.509 certificate with an oversized Authority Key Identifier extension.",
"title": "Summary"
},
{
"category": "general",
"text": "CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-87676 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-87676.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-87676"
},
{
"cve": "CVE-2026-87677",
"cwe": {
"id": "CWE-78",
"name": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)"
},
"notes": [
{
"category": "other",
"text": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
"title": "CWE-78"
},
{
"category": "description",
"text": "Multiple vulnerabilities in HPE Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 include OS command injection, buffer overflow, privilege escalation, and access restriction bypass.",
"title": "Summary"
},
{
"category": "general",
"text": "CVSS:4.0/AV:A/AC:L/AT:P/PR:H/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-87677 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-87677.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-87677"
},
{
"cve": "CVE-2026-87678",
"cwe": {
"id": "CWE-93",
"name": "Improper Neutralization of CRLF Sequences (\u0027CRLF Injection\u0027)"
},
"notes": [
{
"category": "other",
"text": "Improper Neutralization of CRLF Sequences (\u0027CRLF Injection\u0027)",
"title": "CWE-93"
},
{
"category": "description",
"text": "A vulnerability in Brocade Fabric OS versions prior to 10.0.1 allows authenticated administrators to inject arbitrary web server directives via the Federated Authentication Identity Provider issuer parameter, potentially disrupting service or altering security controls.",
"title": "Summary"
},
{
"category": "general",
"text": "CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-87678 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-87678.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.2,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-87678"
},
{
"cve": "CVE-2026-87679",
"cwe": {
"id": "CWE-122",
"name": "Heap-based Buffer Overflow"
},
"notes": [
{
"category": "other",
"text": "Heap-based Buffer Overflow",
"title": "CWE-122"
},
{
"category": "description",
"text": "Brocade Fabric OS versions prior to 10.0.1 contain a vulnerability in trunk configuration processing that allows authenticated administrators to cause heap corruption or execute arbitrary code via crafted REST API requests with excessive list delimiters.",
"title": "Summary"
},
{
"category": "general",
"text": "CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-87679 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-87679.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.2,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-87679"
},
{
"cve": "CVE-2026-87688",
"cwe": {
"id": "CWE-77",
"name": "Improper Neutralization of Special Elements used in a Command (\u0027Command Injection\u0027)"
},
"notes": [
{
"category": "other",
"text": "Improper Neutralization of Special Elements used in a Command (\u0027Command Injection\u0027)",
"title": "CWE-77"
},
{
"category": "description",
"text": "Multiple security vulnerabilities in HPE Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 allow authenticated attackers with certificate deletion privileges to bypass access restrictions, execute arbitrary code, escalate privileges, and cause buffer overflows.",
"title": "Summary"
},
{
"category": "general",
"text": "CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-87688 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-87688.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-87688"
},
{
"cve": "CVE-2026-94575",
"cwe": {
"id": "CWE-483",
"name": "Incorrect Block Delimitation"
},
"notes": [
{
"category": "other",
"text": "Incorrect Block Delimitation",
"title": "CWE-483"
},
{
"category": "description",
"text": "HPE Brocade Fabric OS versions prior to 10.0.1 contain multiple security vulnerabilities, including a logic flaw that allows authenticated low-privileged users to bypass RBAC and access restricted administrative settings.",
"title": "Summary"
},
{
"category": "general",
"text": "CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-94575 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-94575.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-94575"
},
{
"cve": "CVE-2026-94576",
"cwe": {
"id": "CWE-187",
"name": "Partial String Comparison"
},
"notes": [
{
"category": "other",
"text": "Partial String Comparison",
"title": "CWE-187"
},
{
"category": "description",
"text": "Multiple vulnerabilities in HPE Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 allow access restriction bypass, arbitrary code execution, privilege escalation, and buffer overflow via account management interface flaws.",
"title": "Summary"
},
{
"category": "general",
"text": "CVSS:4.0/AV:A/AC:H/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-94576 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-94576.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.0,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-94576"
},
{
"cve": "CVE-2026-94577",
"cwe": {
"id": "CWE-15",
"name": "External Control of System or Configuration Setting"
},
"notes": [
{
"category": "other",
"text": "External Control of System or Configuration Setting",
"title": "CWE-15"
},
{
"category": "description",
"text": "Multiple security vulnerabilities in HPE Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 allow privilege escalation, access bypass, arbitrary code execution, and buffer overflow.",
"title": "Summary"
},
{
"category": "general",
"text": "CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-94577 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-94577.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-94577"
},
{
"cve": "CVE-2026-94578",
"notes": [
{
"category": "description",
"text": "HPE Brocade Fabric OS versions before 10.0.1 contain multiple critical vulnerabilities including an authorization logic flaw in the AAA framework that enables remote authenticated users to bypass admin restrictions and gain root-equivalent access.",
"title": "Summary"
},
{
"category": "general",
"text": "CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-94578 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-94578.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-94578"
},
{
"cve": "CVE-2026-94579",
"cwe": {
"id": "CWE-78",
"name": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)"
},
"notes": [
{
"category": "other",
"text": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
"title": "CWE-78"
},
{
"category": "description",
"text": "An OS command injection vulnerability in Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 allows authenticated users with shell metacharacters in their username or profile identifier to execute arbitrary commands as root upon SSH session termination.",
"title": "Summary"
},
{
"category": "general",
"text": "CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-94579 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-94579.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.0,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-94579"
},
{
"cve": "CVE-2026-94580",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"notes": [
{
"category": "other",
"text": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)",
"title": "CWE-22"
},
{
"category": "description",
"text": "HPE Brocade Fabric OS versions prior to 10.0.1 have multiple critical vulnerabilities including authentication bypass, denial of service, information disclosure, privilege escalation, and a REST API USB management flaw allowing authenticated users with USB privileges to delete arbitrary files.",
"title": "Summary"
},
{
"category": "general",
"text": "CVSS:4.0/AV:A/AC:L/AT:P/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-94580 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-94580.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-94580"
},
{
"cve": "CVE-2026-94581",
"cwe": {
"id": "CWE-78",
"name": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)"
},
"notes": [
{
"category": "other",
"text": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
"title": "CWE-78"
},
{
"category": "description",
"text": "An OS command injection vulnerability in Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 allows authenticated, high-privileged attackers to execute arbitrary root-level commands via the REST API by exploiting SSH known host settings.",
"title": "Summary"
},
{
"category": "general",
"text": "CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-94581 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-94581.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-94581"
},
{
"cve": "CVE-2026-94582",
"cwe": {
"id": "CWE-120",
"name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
},
"notes": [
{
"category": "other",
"text": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)",
"title": "CWE-120"
},
{
"category": "description",
"text": "Multiple security vulnerabilities in HPE Brocade Fabric OS versions before 10.0.1 include authentication bypass, denial of service, information disclosure, privilege escalation, and a memory buffer overflow in the Fabric Shortest Path First protocol causing daemon crashes or arbitrary code execution.",
"title": "Summary"
},
{
"category": "general",
"text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-94582 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-94582.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-94582"
},
{
"cve": "CVE-2026-94583",
"cwe": {
"id": "CWE-362",
"name": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)"
},
"notes": [
{
"category": "other",
"text": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)",
"title": "CWE-362"
},
{
"category": "description",
"text": "HPE Brocade Fabric OS versions prior to 10.0.1 contain multiple security vulnerabilities including authentication bypass, denial of service, privilege escalation, and a race condition in the REST management interface causing sensitive data leakage.",
"title": "Summary"
},
{
"category": "general",
"text": "CVSS:4.0/AV:A/AC:H/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-94583 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-94583.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 2.6,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-94583"
},
{
"cve": "CVE-2026-94584",
"cwe": {
"id": "CWE-362",
"name": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)"
},
"notes": [
{
"category": "other",
"text": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)",
"title": "CWE-362"
},
{
"category": "description",
"text": "HPE Brocade Fabric OS versions prior to 10.0.1 contain multiple security vulnerabilities including authentication bypass, denial of service, information disclosure, privilege escalation, and a race condition causing incorrect client IP handling and audit log inaccuracies.",
"title": "Summary"
},
{
"category": "general",
"text": "CVSS:4.0/AV:A/AC:H/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-94584 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-94584.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 2.6,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-94584"
},
{
"cve": "CVE-2026-94585",
"cwe": {
"id": "CWE-288",
"name": "Authentication Bypass Using an Alternate Path or Channel"
},
"notes": [
{
"category": "other",
"text": "Authentication Bypass Using an Alternate Path or Channel",
"title": "CWE-288"
},
{
"category": "description",
"text": "An authentication bypass vulnerability in Brocade Fabric OS versions prior to 9.2.2d on the MXG610 platform enables an unauthenticated, network-adjacent attacker to gain administrative access via the Single Sign-On workflow.",
"title": "Summary"
},
{
"category": "general",
"text": "CVSS:4.0/AV:A/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-94585 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-94585.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-94585"
},
{
"cve": "CVE-2026-94586",
"cwe": {
"id": "CWE-78",
"name": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)"
},
"notes": [
{
"category": "other",
"text": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
"title": "CWE-78"
},
{
"category": "description",
"text": "A command injection vulnerability in Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 allows authenticated users with configuration download permissions to execute arbitrary root-level commands via the WebTools interface.",
"title": "Summary"
},
{
"category": "general",
"text": "CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-94586 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-94586.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-94586"
},
{
"cve": "CVE-2026-94587",
"cwe": {
"id": "CWE-120",
"name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
},
"notes": [
{
"category": "other",
"text": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)",
"title": "CWE-120"
},
{
"category": "description",
"text": "A buffer overflow vulnerability in Brocade Fabric OS WebTools administrative interface versions before 9.2.2d and 10.0.0 through 10.0.0a1 allows authenticated users with configuration download permissions to crash the weblinker daemon.",
"title": "Summary"
},
{
"category": "general",
"text": "CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-94587 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-94587.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-94587"
}
]
}
Loading…
Loading…
Drag nodes to arrange them. Double-click a related vulnerability to open it, or a source to visit its link. The Physics button on the left tunes the layout and the simulation; the legend at the bottom left hides or shows nodes by kind and by sighting type.
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Vulnerability timeline
Sightings and recorded dates, grouped by day · UTC
Loading timeline…
Loading…
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.