CVE-2026-87683

Multiple stack-based buffer overflow vulnerabilities exist in the REST API management component of Brocade Fabric OS versions prior to 10.0.1. When processing API request payloads (such as device configuration attributes or port mapping requests) the REST API service fails to properly validate incoming array counts and string lengths against internal buffer capacities. An authenticated attacker with REST API access can transmit crafted, oversized request parameters to induce memory corruption on the execution stack. This may result in a denial-of-service condition (daemon crash) or potential arbitrary code execution within the management process context.

• CWE-121

• https://support.broadcom.com/external/content/SecurityAdvisories/0/39077Vendor Advisory

Published

Oct 8, 2026

Last Modified

Oct 13, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-87678An input validation and output encoding vulnerability exists…5.2
• CVE-2026-87679When Brocade Fabric OS versions before 10.0.1 processes trun…7.2
• CVE-2026-8768A vulnerability was found in vercel ai up to 3.0.97. The aff…7.3
• CVE-2026-87680A command injection vulnerability in the REST API management…8.8
• CVE-2026-87681An Access Control Bypass vulnerability exists in the Role-Ba…6.3
• CVE-2026-87682Multiple OS Command Injection vulnerabilities exist in the m…8.8
• CVE-2026-87684A stack-based buffer overflow vulnerability exists in the SN…9.8
• CVE-2026-87685An arbitrary file manipulation vulnerability exists in the W…6.8
• CVE-2026-87686An authentication and access control bypass vulnerability ex…4.3
• CVE-2026-87687An authorization and input validation vulnerability exists i…7.3
• CVE-2026-87688An input validation vulnerability exists in the security cer…6.8
• CVE-2026-87689The Metasploit Framework Web Service REST API (msf-ws) expos…9.8