{"id":"CVE-2026-87684","title":"A stack-based buffer overflow vulnerability exists in the SNMP daemon request handling of Brocade Fabric versions before 10.0.1","summary":"A stack-based buffer overflow vulnerability exists in the SNMP daemon request handling of Brocade Fabric versions before 10.0.1. When processing an incoming SNMPv3 packet, an internal statistics gathering handler copies user-supplied con…","severity":"critical","cvss":9.8,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-121"],"vendor":"broadcom","product":"fabric_operating_system","affected":["fabric_operating_system < 10.0.1"],"patched":["fabric_operating_system 10.0.1"],"published":"2026-10-08","updated":"2026-10-14","sourceUpdated":"2026-10-14T14:46:52.753","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-87684","references":[{"url":"https://support.broadcom.com/external/content/SecurityAdvisories/0/39078","label":"sirt@brocade.com"}],"tags":["nvd","cve.org"],"epss":0.00577,"epssPercentile":0.4737,"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"total","timestamp":"2026-10-08T15:19:07.602340Z"},"scores":{"nvd":9.8,"cna":8.7},"ingestedAt":"2026-10-08T03:03:35.550Z","slug":"CVE-2026-87684","body":"## Overview\n\nA stack-based buffer overflow vulnerability exists in the SNMP daemon request handling of Brocade Fabric versions before 10.0.1. When processing an incoming SNMPv3 packet, an internal statistics gathering handler copies user-supplied context name data into a fixed-size buffer without properly validating the length of the string. A remote, unauthenticated attacker (under default configuration) can exploit this vulnerability by sending a specially crafted SNMPv3 packet, leading to memory corruption, daemon crash (Denial of Service), or potential arbitrary code execution.\n\n## Affected\n\n- `fabric_operating_system < 10.0.1`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `fabric_operating_system 10.0.1`","depth":"midnight","depthScore":54,"depthScoreParts":{"impact":53.9,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[{"seq":220185,"id":"CVE-2026-87684","ts":1791992228454,"field":"cvss","old":"8.7","new":"9.8"},{"seq":220184,"id":"CVE-2026-87684","ts":1791992228454,"field":"severity","old":"high","new":"critical"}]}