CVE-2026-87665

A stack-based buffer overflow vulnerability exists in the Internet Key Exchange (IKEv2) protocol handler on Brocade Fabric OS versions before 10.0.1. The vulnerability occurs when processing initial IKE key exchange requests on extension switches or blades running IPsec-enabled Fibre Channel over IP (FCIP) circuits. An unauthenticated remote attacker can exploit this vulnerability by sending a single, specifically crafted UDP packet (Port 500) containing an oversized Nonce payload. Successful exploitation results in a denial of service (data-plane process crash)

• CWE-121

• https://support.broadcom.com/external/content/SecurityAdvisories/0/39148Vendor Advisory

Published

Oct 8, 2026

Last Modified

Oct 13, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-8766A flaw has been found in Kilo-Org kilocode up to 7.0.47. Thi…6.5
• CVE-2026-87660An improper file permission and missing authorization vulner…7.1
• CVE-2026-87661Brocade Fabric OS versions before 9.2.2d and 10.0.0 through …5.7
• CVE-2026-87662Brocade Fabric versions before 9.2.2d and 10.0.0 through 10.…6.7
• CVE-2026-87663An authentication bypass and command injection vulnerability…6.7
• CVE-2026-87664A session context forgery vulnerability exists in the web ma…7.8
• CVE-2026-87666An OS command injection vulnerability exists in the time and…8
• CVE-2026-87667An argument injection vulnerability exists in the configurat…4.5
• CVE-2026-87668A stack-based buffer overflow vulnerability exists in the di…6.5
• CVE-2026-87669A missing authorization check in Brocade Fabric OS versions …4.3
• CVE-2026-8767A vulnerability has been found in vercel ai up to 3.0.97. Im…7.5
• CVE-2026-87670An authorization logic vulnerability exists in the Brocade F…4.3