Skip to content
OpenAdvisories
High · 7.1 CVE-2026-87681 EUVD-2026-94655GHSA-h7f4-226j-w5j6

An Access Control Bypass vulnerability exists in the Role-Based Access Control (RBAC) validation engine of Brocade Fabric OS versions befor…

Published Oct 8, 2026 · Updated Oct 8, 2026 · Assigned by brocade

Description

An Access Control Bypass vulnerability exists in the Role-Based Access Control (RBAC) validation engine of Brocade Fabric OS versions before 10.0.1. When processing certain management protocol operations, the RBAC engine incorrectly categorizes non-standard action opcodes during permission checks. This allows authenticated users with read-only management privileges to bypass access controls and execute restricted administrative operations.

Affected products

VendorProductAffectedFixed
Brocade Fabric OS < 10.0.1 10.0.1

Advisories 1

References