CVE-2026-87682

Multiple OS Command Injection vulnerabilities exist in the management interface and session processing routines of Brocade Fabric OS versions before 10.0.1. Input processing flaws during remote management connection validation and session verification for directory-based user accounts allow untrusted input containing shell metacharacters to reach internal system execution wrappers. An authenticated user or a compromised directory service account can exploit these vulnerabilities to execute arbitrary operating system commands with elevated privileges on the target device.

• CWE-78

• https://support.broadcom.com/external/content/SecurityAdvisories/0/39076Vendor Advisory

Published

Oct 8, 2026

Last Modified

Oct 13, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-87677An OS command injection vulnerability exists in the account …6.6
• CVE-2026-87678An input validation and output encoding vulnerability exists…5.2
• CVE-2026-87679When Brocade Fabric OS versions before 10.0.1 processes trun…7.2
• CVE-2026-8768A vulnerability was found in vercel ai up to 3.0.97. The aff…7.3
• CVE-2026-87680A command injection vulnerability in the REST API management…8.8
• CVE-2026-87681An Access Control Bypass vulnerability exists in the Role-Ba…6.3
• CVE-2026-87683Multiple stack-based buffer overflow vulnerabilities exist i…8.8
• CVE-2026-87684A stack-based buffer overflow vulnerability exists in the SN…9.8
• CVE-2026-87685An arbitrary file manipulation vulnerability exists in the W…6.8
• CVE-2026-87686An authentication and access control bypass vulnerability ex…4.3
• CVE-2026-87687An authorization and input validation vulnerability exists i…7.3
• CVE-2026-87688An input validation vulnerability exists in the security cer…6.8