CVE-2026-87660

HighCVSS 7.1/10Last modified Oct 14, 2026

Description

An improper file permission and missing authorization vulnerability exists in the diagnostic kernel module subsystem of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. An unprivileged local user can invoke privileged hardware tests, force system error conditions, reset hardware blades, or disrupt storage fabric operations.

Metrics

CVSS 3.1 7.1/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Weakness enumeration

CWE-732

Affected software

No affected versions have been published.

Timeline

Published
Oct 8, 2026
Last modified
Oct 14, 2026
NVD status
Analyzed

Related CVEs from 2026

CVE-2026-876615.7Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 directly accepts Apache configuration file data during service setup orCVE-2026-876626.7Brocade Fabric versions before 9.2.2d and 10.0.0 through 10.0.0a1 handling of specific download protocols utilizes unsanitized parameter strCVE-2026-876636.7An authentication bypass and command injection vulnerability exists in the inter-switch remote execution service of Brocade Fabric OS versioCVE-2026-876647.8A session context forgery vulnerability exists in the web management daemon of Brocade Fabric OS versions 9.2.2d and 10.0.0 through 10.0.0a1CVE-2026-876657.5A stack-based buffer overflow vulnerability exists in the Internet Key Exchange (IKEv2) protocol handler on Brocade Fabric OS versions beforCVE-2026-876668.0An OS command injection vulnerability exists in the time and zone management subsystem of Brocade Fabric OS versions before 9.2.2d and 10.0.CVE-2026-876674.5An argument injection vulnerability exists in the configuration management command-line utility of Brocade Fabric OS versions before 9.2.2d CVE-2026-876686.5A stack-based buffer overflow vulnerability exists in the diagnostic execution utility of Brocade Fabric OS versions before 10.0.1. When proCVE-2026-876694.3A missing authorization check in Brocade Fabric OS versions before 10.0.1 REST API interface of affected platform releases allows an authentCVE-2026-87677.5A vulnerability has been found in vercel ai up to 3.0.97. Impacted is the function run of the file .github/workflows/prettier-on-automerge.yCVE-2026-876704.3An authorization logic vulnerability exists in the Brocade Fabric OS versions before 10.0.1 REST API gateway. The internal gate guarding resCVE-2026-876717.5An out-of-bounds memory read vulnerability exists in the web management daemon of Brocade Fabric OS versions before 10.0.1. Unauthenticated
CVE-2026-87660: High severity, CVSS 7.1 | Vulnix