CVE-2026-87680
HIGHCVSS 8.8/10EPSS 1.02%
Last modified
CVE-2026-87680 is a high-severity vulnerability rated 8.8/10 on the CVSS scale. A command injection vulnerability in the REST API management interface of Brocade Fabric OS versions before 10.0.1 allows an authenticated user to execute arbitrary system commands via crafted input parameters.. EPSS estimates a 1.02% chance of exploitation in the next 30 days.
Description
A command injection vulnerability in the REST API management interface of Brocade Fabric OS versions before 10.0.1 allows an authenticated user to execute arbitrary system commands via crafted input parameters.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Broadcom | Fabric Operating System | < 10.0.1 |
References
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2026-87680?
A command injection vulnerability in the REST API management interface of Brocade Fabric OS versions before 10.0.1 allows an authenticated user to execute arbitrary system commands via crafted input parameters.
How severe is CVE-2026-87680?
CVE-2026-87680 has a CVSS score of 8.8/10 (HIGH severity). The EPSS model estimates a 1.02% probability of exploitation in the next 30 days.
How do I fix CVE-2026-87680?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-87675An OS command injection vulnerability exists in the configur…6.8
- CVE-2026-87676A stack-based buffer overflow vulnerability exists in the se…5.7
- CVE-2026-87677An OS command injection vulnerability exists in the account …6.6
- CVE-2026-87678An input validation and output encoding vulnerability exists…5.2
- CVE-2026-87679When Brocade Fabric OS versions before 10.0.1 processes trun…7.2
- CVE-2026-8768A vulnerability was found in vercel ai up to 3.0.97. The aff…7.3
- CVE-2026-87681An Access Control Bypass vulnerability exists in the Role-Ba…6.3
- CVE-2026-87682Multiple OS Command Injection vulnerabilities exist in the m…8.8
- CVE-2026-87683Multiple stack-based buffer overflow vulnerabilities exist i…8.8
- CVE-2026-87684A stack-based buffer overflow vulnerability exists in the SN…9.8
- CVE-2026-87685An arbitrary file manipulation vulnerability exists in the W…6.8
- CVE-2026-87686An authentication and access control bypass vulnerability ex…4.3
Are you affected by CVE-2026-87680?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST