CVE-2026-87681EPSS p6.1%
CVE-2026-87681CVE-2026-87681
Description
An Access Control Bypass vulnerability exists in the Role-Based Access Control (RBAC) validation engine of Brocade Fabric OS versions before 10.0.1. When processing certain management protocol operations, the RBAC engine incorrectly categorizes non-standard action opcodes during permission checks. This allows authenticated users with read-only management privileges to bypass access controls and execute restricted administrative operations.
Scoring
| EPSS | 0.17% probability of exploitation · percentile 6.1% · 2026-10-10T12:00:23Z |
| Last modified | 2026-10-08 |