{"id":"CVE-2026-87673","published":"2026-10-08T04:17:53.117","lastModified":"2026-10-09T04:18:13.780","description":"An OS command injection vulnerability exists in maintenance command-line diagnostic utilities on Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. The binary fails to sanitize user-supplied input options when invoking underlying system commands through a shell interpreter. A privileged user with maintenance account access can exploit this issue by supplying crafted parameters, which results in arbitrary OS command execution with root privileges.","cvssScore":null,"cvssSeverity":null,"cvssVector":null,"cwes":["CWE-78"],"vendors":[],"products":[],"references":[{"url":"https://support.broadcom.com/external/content/SecurityAdvisories/0/39144","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}