EXPOSURES › CVE-2026-87684
CVE-2026-87684
CRITICALA stack-based buffer overflow in Brocade Fabric SNMP daemons before 10.0.1 allows remote unauthenticated attackers to crash the daemon or execute arbitrary code via crafted SNMPv3 packets.
Brocade Fabric versions before 10.0.1 contain a stack-based buffer overflow in the SNMP daemon that lets remote attackers cause denial of service or achieve arbitrary code execution. DIB organizations must patch this critical vulnerability immediately, as it is exploitable under default configurations and represents a severe exposure for network infrastructure. Failure to patch leaves systems vulnerable to remote compromise and potential lateral movement.
Shame score — A critical remote code execution vulnerability in network infrastructure that is exploitable under default configurations and has been publicly disclosed, indicating a severe avoidable failure in secure coding and patch management.
▸ RECOMMENDED ACTION Remote code execution — patch the affected products on priority.
A stack-based buffer overflow vulnerability exists in the SNMP daemon request handling of Brocade Fabric versions before 10.0.1. When processing an incoming SNMPv3 packet, an internal statistics gathering handler copies user-supplied context name data into a fixed-size buffer without properly validating the length of the string. A remote, unauthenticated attacker (under default configuration) can exploit this vulnerability by sending a specially crafted SNMPv3 packet, leading to memory corruption, daemon crash (Denial of Service), or potential arbitrary code execution.
| PRODUCT | STATUS |
|---|---|
| Clarity Broadcom |
Authorized |
| General Support Systems (GSS) Broadcom |
Authorized |
| Rally Broadcom |
Authorized |
| Symantec Gov Cloud Security (GCS) Broadcom |
In Process |