CVE-2026-87661: Brocade Fabric OS

Medium severity, CVSS 6.8. EPSS: 0.2% chance of exploitation in the next 30 days.

Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 directly accepts Apache configuration file data during service setup or re-initialization. An attacker capable of corrupting the configuration structure will prevent the web management service from starting or recovering during service bring-up, leading to a persistent Denial of Service (DoS) of the administrative web interface.

Affected products

• Brocade Fabric OS: before 9.2.2d (fixed in 9.2.2d); from 10.0.0, up to and including 10.0.0a1

Published 2026-10-08. Last modified 2026-10-08.