CVE-2026-87670
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
An authorization logic vulnerability exists in the Brocade Fabric OS versions before 10.0.1 REST API gateway. The internal gate guarding restricted management endpoints relies exclusively on client-controlled HTTP headers. An authenticated user with any valid REST session can spoof these headers to gain unauthorized access to internal management endpoints. This allows low-privilege users to view sensitive chassis metadata, hardware memory patrolling state, and firmware integrity audit logs.
| CWE | CWE-290 |
| Vendor | brocade |
| Product | fabric os |
| Published | Oct 8, 2026 |
Stay Ahead of the Next One
Get instant alerts for brocade fabric os
Be the first to know when new unknown vulnerabilities affecting brocade fabric os are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Brocade / Fabric OS
0 < 10.0.1