CVE-2026-87685

An arbitrary file manipulation vulnerability exists in the WebTools management interface of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. When processing configuration transfer requests, the application fails to properly validate and sanitize a user-supplied status file path parameter. An authenticated administrative user can exploit this issue by submitting a specially crafted status file parameter, causing the underlying process to move an arbitrary system file to a predictable, world-readable temporary directory. This can lead to persistent Denial of Service (DoS), critical system file destruction, host compromise, or sensitive data leakage.

• CWE-73

• https://support.broadcom.com/external/content/SecurityAdvisories/0/39079Vendor Advisory

Published

Oct 8, 2026

Last Modified

Oct 14, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-8768A vulnerability was found in vercel ai up to 3.0.97. The aff…7.3
• CVE-2026-87680A command injection vulnerability in the REST API management…8.8
• CVE-2026-87681An Access Control Bypass vulnerability exists in the Role-Ba…6.3
• CVE-2026-87682Multiple OS Command Injection vulnerabilities exist in the m…8.8
• CVE-2026-87683Multiple stack-based buffer overflow vulnerabilities exist i…8.8
• CVE-2026-87684A stack-based buffer overflow vulnerability exists in the SN…9.8
• CVE-2026-87686An authentication and access control bypass vulnerability ex…4.3
• CVE-2026-87687An authorization and input validation vulnerability exists i…7.3
• CVE-2026-87688An input validation vulnerability exists in the security cer…6.8
• CVE-2026-87689The Metasploit Framework Web Service REST API (msf-ws) expos…9.8
• CVE-2026-8769A vulnerability was determined in vercel ai up to 3.0.97. Th…6.5
• CVE-2026-87690The Metasploit Framework post module post/apple_ios/gather/i…8.8