CVE-2026-87682
Quick assessment
Affected
Brocade Fabric OS
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
在 Brocade Fabric OS 10.0.1 之前的版本中，管理接口和会话处理例程存在多个操作系统命令注入漏洞。在远程管理连接验证以及基于目录的用户账户会话验证过程中，输入处理存在缺陷，导致包含 Shell 元字符的不可信输入能够传递至内部系统执行包装器。攻击者若为已认证用户或劫持了目录服务账户，即可利用这些漏洞，在目标设备上以提权权限执行任意操作系统命令。
Possible ATT&CK Techniques 1 AI
T1059 · Command and Scripting Interpreter
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-87682
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
Multiple OS Command Injection vulnerabilities exist in the management interface and session processing routines of Brocade Fabric OS versions before 10.0.1. Input processing flaws during remote management connection validation and session verification for directory-based user accounts allow untrusted input containing shell metacharacters to reach internal system execution wrappers. An authenticated user or a compromised directory service account can exploit these vulnerabilities to execute arbitrary operating system commands with elevated privileges on the target device.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Source: CVE Program / CVE List V5
Vulnerability Type
OS命令中使用的特殊元素转义处理不恰当(OS命令注入)
Source: CVE Program / CVE List V5
Affected Products
II. Public POCs for CVE-2026-87682
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-87682
请登录查看更多情报信息。
Other References for CVE-2026-87682 (1)
Same Patch Batch · Brocade · 2026-10-08 · 31 CVEs total
| CVE-2026-87684 | 8.7 HIGH | Brocade Fabric<10.0.1 SNMP守护进程栈缓冲区溢出漏洞 |
| CVE-2026-87666 | 8.6 HIGH | Brocade Fabric OS 9.2.2d/10.0.0a1 OS命令注入漏洞 |
| CVE-2026-87683 | 8.6 HIGH | Brocade Fabric OS堆缓冲区溢出漏洞 |
| CVE-2026-87679 | 8.5 HIGH | Brocade Fabric OS<10.0.1堆溢出漏洞 |
| CVE-2026-87680 | 8.5 HIGH | Brocade Fabric OS命令注入漏洞 |
| CVE-2026-87674 | 8.5 HIGH | Brocade Fabric OS本地提权漏洞（9.2.2d/10.0.0） |
| CVE-2026-87687 | 8.5 HIGH | Brocade Fabric OS 垂直提权与越权漏洞 |
| CVE-2026-87688 | 8.5 HIGH | Brocade Fabric OS远程命令执行漏洞 |
| CVE-2026-87667 | 8.4 HIGH | Brocade Fabric OS参数注入漏洞 |
| CVE-2026-87685 | 8.4 HIGH | Brocade Fabric OS任意文件操纵漏洞 |
| CVE-2026-94578 | 7.5 HIGH | Brocade Fabric OS授权逻辑漏洞 |
| CVE-2026-87675 | 7.3 HIGH | Brocade Fabric OS OS命令注入漏洞 |
| CVE-2026-87681 | 7.1 HIGH | Brocade Fabric OS<10.0.1访问控制绕过漏洞 |
| CVE-2026-87671 | 7.1 HIGH | Brocade Fabric OS越界读取致DoS漏洞 |
| CVE-2026-87659 | 7.1 HIGH | Brocade Fabric OS<10.0.1认证绕过漏洞 |
| CVE-2026-87660 | 7.0 HIGH | Brocade Fabric OS权限缺失漏洞（<9.2.2d/10.0.0-10.0.0a1） |
| CVE-2026-87673 | 7.0 HIGH | Brocade Fabric OS 远程命令注入漏洞 |
| CVE-2026-87678 | 6.9 MEDIUM | Brocade Fabric OS<10.0.1注入漏洞 |
| CVE-2026-87676 | 6.9 MEDIUM | Brocade Fabric OS堆溢出致DoS |
| CVE-2026-87668 | 6.9 MEDIUM | Brocade Fabric OS堆栈溢出致拒绝服务漏洞 |
Showing top 20 of 31 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
V. Comments for CVE-2026-87682
No comments yet