{"id":"CVE-2026-87673","title":"An OS command injection vulnerability exists in maintenance command-line diagnostic utilities on Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1","summary":"An OS command injection vulnerability exists in maintenance command-line diagnostic utilities on Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. The binary fails to sanitize user-supplied input options when invoking…","severity":"high","cvss":7.2,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-78"],"vendor":"broadcom","product":"fabric_operating_system","affected":["fabric_operating_system < 9.2.2d","fabric_operating_system >= 10.0.0, < 10.0.1"],"patched":["fabric_operating_system 10.0.1"],"published":"2026-10-08","updated":"2026-10-14","sourceUpdated":"2026-10-14T19:12:50.530","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-87673","references":[{"url":"https://support.broadcom.com/external/content/SecurityAdvisories/0/39144","label":"sirt@brocade.com"}],"tags":["nvd","cve.org"],"epss":0.01789,"epssPercentile":0.78233,"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"total","timestamp":"2026-10-08T13:13:03.424762Z"},"scores":{"nvd":7.2,"cna":7},"ingestedAt":"2026-10-08T04:04:32.124Z","slug":"CVE-2026-87673","body":"## Overview\n\nAn OS command injection vulnerability exists in maintenance command-line diagnostic utilities on Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. The binary fails to sanitize user-supplied input options when invoking underlying system commands through a shell interpreter. A privileged user with maintenance account access can exploit this issue by supplying crafted parameters, which results in arbitrary OS command execution with root privileges.\n\n## Affected\n\n- `fabric_operating_system < 9.2.2d`\n- `fabric_operating_system >= 10.0.0, < 10.0.1`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `fabric_operating_system 10.0.1`","depth":"twilight","depthScore":40,"depthScoreParts":{"impact":39.6,"likelihood":0.4,"exploitation":0,"ransomware":0},"changes":[{"seq":220413,"id":"CVE-2026-87673","ts":1792007496449,"field":"cvss","old":"7","new":"7.2"}]}