{"id":"CVE-2026-87667","published":"2026-10-08T04:17:52.843","lastModified":"2026-10-08T20:06:51.340","description":"An argument injection vulnerability exists in the configuration management command-line utility of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. When executing configuration viewing commands with search pattern filters, the utility fails to sanitize user-supplied search string options before passing them to internal search commands. An authenticated user with low-privilege administrative access can exploit this vulnerability to read arbitrary files on the local operating system, including sensitive configuration files, system password hashes and system secrets.","cvssScore":null,"cvssSeverity":null,"cvssVector":null,"cwes":["CWE-88"],"vendors":[],"products":[],"references":[{"url":"https://support.broadcom.com/external/content/SecurityAdvisories/0/39151","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}