FAIL › dossier
fabric operating system
PRODUCT· dossier confidence 20%
Brocade's Fabric OS has a concerning security track record with multiple critical vulnerabilities, including remote code execution and authorization bypasses, highlighting potential gaps in its security engineering and patch deployment processes.
PROFILE
CategorynetworkingWhat they doBrocade provides Fabric OS, an operating system for network switches and fabric infrastructure.
Websitehttps://www.brocade.com ↗
SECURITY POSTURE
The company has a history of critical vulnerabilities in its Fabric OS, including remote code execution and authorization bypasses, indicating potential weaknesses in its software development lifecycle and patch management processes.
Notable failures
- CVE-2026-87684: stack-based buffer overflow in SNMP daemons allowing RCE
- CVE-2026-87659: authorization bypass in Fabric OS allowing admin bypass
- CVE-2024-3596: RADIUS protocol forgery vulnerability
Patterns: repeated critical RCE and authorization bypass vulnerabilities in Fabric OS; vulnerabilities in SNMP and RADIUS protocol implementations
FAILURE HISTORY · 4
| DATE | EVENT | SEV | SUMMARY |
|---|---|---|---|
| 2026-10-08 | CVE-2026-87684 | critical | A stack-based buffer overflow in Brocade Fabric SNMP daemons before 10.0.1 allows remote unauthenticated attackers to crash the daemon or execute arbitrary code via crafted SNMPv3 packets. |
| 2026-10-08 | CVE-2026-87659 | critical | A critical authorization bypass in Brocade Fabric OS before 10.0.1 lets compromised switches bypass admin authentication and execute actions like password resets and reboots. |
| 2024-07-09 | CVE-2024-3596 | critical | CVE-2024-3596: RADIUS Protocol under RFC 2865 is susceptible to forgery attacks by a local atta |
| 2022-12-08 | CVE-2022-33186 | critical | CVE-2022-33186: A vulnerability in Brocade Fabric OS software v9.1.1, v9.0.1e, v8.2.3c, v7.4.2j, |
DOSSIER SOURCES
- Bridge returned error 0! (20741) · 127.0.0.1
- Bridge returned error 0! (20741) · 127.0.0.1
- Bridge returned error 0! (20741) · 127.0.0.1
Open questions: Exact founding year and headquarters location need verification from authoritative sources. · Current ownership structure and company size require updated data.
DOSSIER · dex-RAG synthesis · grounded in our own collection + trusted sourcesbuilt 2026-10-15 04:27:47.892340+00:00