CVE-2026-87688: Fabric OS 0 to before 9.2.2d, 10.0.0 through 10.0.0a1

Affected technology

Fabric OS · 0 to before 9.2.2d, 10.0.0 through 10.0.0a1
Brocade

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 4.0): Adjacent network · High privileges required · No user interaction required

What an attacker can do

An authenticated attacker with privileges to perform certificate deletion requests can leverage this flaw to execute arbitrary system commands with the privileges of the underlying management daemon. Vendor/CNA’s CVSS 4.0 assessment (base score 8.5/10) rates confidentiality, integrity and availability impact as high.