VDB
GCVE-110-NCSC-2026-432
GCVE-110-NCSC-2026-432
Advisory PublishedCVSS 4.5/10
HPE Brocade Fabric OS versions prior to 10.0.1 contain multiple critical security vulnerabilities, including an authorization bypass that enables compromised switches to perform unauthorized administrative actions.
Weaknesses (CWE)
CWE-306Missing Authentication for Critical FunctionCWE-732Incorrect Permission Assignment for Critical ResourceCWE-93Improper Neutralization of CRLF Sequences ('CRLF Injection')CWE-290Authentication Bypass by SpoofingCWE-121Stack-based Buffer OverflowCWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')CWE-88Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')CWE-862Missing AuthorizationCWE-125Out-of-bounds ReadCWE-532Insertion of Sensitive Information into Log FileCWE-122Heap-based Buffer OverflowCWE-77Improper Neutralization of Special Elements used in a Command ('Command Injection')CWE-483Incorrect Block DelimitationCWE-187Partial String ComparisonCWE-15External Control of System or Configuration SettingCWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')CWE-362Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')CWE-288Authentication Bypass Using an Alternate Path or Channel
Risk Scores
CVSS 3.1
4.5/10
Medium · CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| HPE | vers:unknown/* | — | — |
| Broadcom | vers:unknown/* | — | — |
Aliases
CVE-2026-87659CVE-2026-87660CVE-2026-87661CVE-2026-87663CVE-2026-87664CVE-2026-87665CVE-2026-87666CVE-2026-87667CVE-2026-87668CVE-2026-87669CVE-2026-87670CVE-2026-87671CVE-2026-87672CVE-2026-87673CVE-2026-87674CVE-2026-87675CVE-2026-87676CVE-2026-87677CVE-2026-87678CVE-2026-87679CVE-2026-87688CVE-2026-94575CVE-2026-94576CVE-2026-94577CVE-2026-94578CVE-2026-94579CVE-2026-94580CVE-2026-94581CVE-2026-94582CVE-2026-94583CVE-2026-94584CVE-2026-94585CVE-2026-94586CVE-2026-94587
References
Browse GCVE Records
5,487 records in the GCVE database · Updated October 16, 2026
No matching records found.
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.