CVE-2026-87672

An information disclosure vulnerability exists in the SupportLink diagnostic collection utilities of Brocade Fabric OS versions before 10.0.1. When SupportLink is configured to use an authenticated HTTP proxy, the system stores the full proxy URL. Anyone with access to the diagnostic support...

CVE-2026-87668

A stack-based buffer overflow vulnerability exists in the diagnostic execution utility of Brocade Fabric OS versions before 10.0.1. When processing command arguments for diagnostic operations, the utility tokenizes user-supplied input into an internal argument array without enforcing boundary...

CVE-2026-87659

A critical authorization bypass vulnerability exists in the Management Server handling of Brocade Fabric OS versions before 10.0.1. A compromised switch connected to the fabric can transmit crafted inband Fibre Channel vendor-unique CT Common Transport management requests to bypass administrative...

CVE-2026-87665

A stack-based buffer overflow vulnerability exists in the Internet Key Exchange IKEv2 protocol handler on Brocade Fabric OS versions before 10.0.1. The vulnerability occurs when processing initial IKE key exchange requests on extension switches or blades running IPsec-enabled Fibre Channel over I...

CVE-2026-94584

A race condition and thread-safety vulnerability exists in the web management daemon of Brocade Fabric OS versions before 10.0.1 . During user authentication requests across a multi-threaded execution pool, the flaw causes PAM modules to process stale or incorrect client IP addresses and switch c...

CVE-2026-94580

A path traversal vulnerability exists in the REST API management interface of Brocade Fabric OS versions before 10.0.1 , specifically within the component handling USB storage operations . An authenticated user with USB management privileges can manipulate requested target paths to bypass intende...

CVE-2026-94575

A logic vulnerability exists in the Brocade Fabric OS web management framework in versions before 10.0.1 . This flaw allows an authenticated, low-privileged user to bypass inner Role-Based Access Control (RBAC) checks under specific environmental conditions. Successful exploitation can lower the ...

EUVD-2026-94681

A race condition vulnerability exists in the request processing logic of the REST management interface on Brocade Fabric OS versions before 10.0.1. When handling concurrent incoming network management FCIP requests, a timing window exists between when a request populates the address variable and...

CVE-2026-94583

A race condition vulnerability exists in the request processing logic of the REST management interface on Brocade Fabric OS versions before 10.0.1. When handling concurrent incoming network management FCIP requests, a timing window exists between when a request populates the address variable and...

CVE-2026-94583

A race condition vulnerability exists in the REST management interface of Brocade Fabric OS versions before 10.0.1 . During concurrent network management FCIP requests , a timing window between populating the address variable and constructing the response context allows the first request to adopt...

EUVD-2026-94680

A memory buffer overflow vulnerability exists in the internal diagnostic and route validation routines used by the Fabric Shortest Path First FSPF protocol component of Brocade Fabric OS versions before 10.0.1. While this code path is part of internal diagnostic functionality and is not directly...

CVE-2026-94582

A memory buffer overflow vulnerability exists in the internal diagnostic and route validation routines used by the Fabric Shortest Path First FSPF protocol component of Brocade Fabric OS versions before 10.0.1. While this code path is part of internal diagnostic functionality and is not directly...

CVE-2026-94582

A memory buffer overflow vulnerability exists in the internal diagnostic and route validation routines of the Fabric Shortest Path First (FSPF) protocol component in Brocade Fabric OS versions prior to 10.0.1 . The root cause is an input processing flaw allowing diagnostic state payloads to excee...

CVE-2026-87668

A stack-based buffer overflow vulnerability exists in the diagnostic execution utility of Brocade Fabric OS versions before 10.0.1. When processing command arguments for diagnostic operations, the utility tokenizes user-supplied input into an internal argument array without enforcing boundary...

CVE-2026-87668

A stack-based buffer overflow vulnerability exists in the diagnostic execution utility of Brocade Fabric OS versions before 10.0.1 . The flaw occurs because the utility tokenizes user-supplied input into an internal argument array without enforcing boundary checks on the maximum capacity. An auth...

EUVD-2026-94679

A stack-based buffer overflow vulnerability exists in the diagnostic execution utility of Brocade Fabric OS versions before 10.0.1. When processing command arguments for diagnostic operations, the utility tokenizes user-supplied input into an internal argument array without enforcing boundary...

CVE-2026-87665

A stack-based buffer overflow vulnerability exists in the Internet Key Exchange IKEv2 protocol handler on Brocade Fabric OS versions before 10.0.1. The vulnerability occurs when processing initial IKE key exchange requests on extension switches or blades running IPsec-enabled Fibre Channel over I...

EUVD-2026-94678

A stack-based buffer overflow vulnerability exists in the Internet Key Exchange IKEv2 protocol handler on Brocade Fabric OS versions before 10.0.1. The vulnerability occurs when processing initial IKE key exchange requests on extension switches or blades running IPsec-enabled Fibre Channel over I...

CVE-2026-87665

A stack-based buffer overflow vulnerability exists in the Internet Key Exchange (IKEv2) protocol handler within Brocade Fabric OS versions prior to 10.0.1 . The flaw is triggered during the processing of initial IKE key exchange requests on extension switches or blades running IPsec-enabled Fibre...

CVE-2026-87672

An information disclosure vulnerability exists in the SupportLink diagnostic collection utilities of Brocade Fabric OS versions before 10.0.1 . When SupportLink is configured with an authenticated HTTP proxy, the system stores the full proxy URL in cleartext. Consequently, individuals with access...