Brocade Fabric OS: Local privilege escalation in system logging daemon
Summary
The system logging daemon of Brocade Fabric OS (Fibre Channel SAN switches and directors) contains a flaw in its internal inter-process communication. A local user with an unprivileged account can submit malformed logging configurations, and improper input sanitization lets injected directives run with elevated privileges when the logging service reloads. This is a local privilege escalation with high impact on confidentiality, integrity and availability of the affected switch.
Affected
- Brocade Fabric OS before 9.2.2d
- Brocade Fabric OS 10.0.0 through 10.0.0a1 (CNA record; the upper bound of this range is not yet confirmed against Broadcom advisory 39145)
Fixed in
- Brocade Fabric OS 9.2.2d
- Brocade Fabric OS 10.0.1 (confirm the release for your branch against Broadcom advisory 39145)
Workaround
Unknown.
Exploitation
- No CISA KEV listing and no public proof of concept found; this means nothing was found, not that none exists.
- EPSS score 0.00119 (low).
- CISA SSVC: exploitation none, automatable no, technical impact total.
Our recommendation
- Check your Fabric OS firmware against Broadcom advisory 39145 and apply the fixed release for your branch.
- Until patched, limit local shell and CLI accounts on the switch and avoid shared admin or service accounts.
- Review logging configuration changes on the switch after patching.
- Assess together with the other Fabric OS advisories published the same day (CVE-2026-87673, CVE-2026-87664).
- Check whether your switches sit on a dedicated management network, not reachable from the internet.
Public exploits
PoC-in-GitHub, Metasploit and Exploit-DB list nothing for this CVE.
Research sources
- Broadcom Security Advisory 39145 support.broadcom.com
- Broadcom Security Advisory 25000 (related Fabric OS advisories) support.broadcom.com
- Vulners CVE record (CNA data) vulners.com
- Vulners Rapid7 record (EPSS, CVSS) vulners.com
- Strix CVE analysis www.strix.ai
Researched and written up in English and German by an AI (Claude by Anthropic) based on NVD, CISA, EPSS and the sources listed. The vendor information is authoritative. Researched on 1 Nov 2026, 11:13.
Original description (NVD)
A local privilege escalation vulnerability exists in the system logging daemon of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. Insufficient access controls on internal inter-process communication (IPC) channels allow an unprivileged local user to submit malformed logging configurations. Due to improper input sanitization during configuration file generation, an attacker can inject arbitrary directives that execute with elevated privileges when the logging service reloads, leading to local privilege escalation.
NVD references (1)
Sources
The tracker combines official, freely usable data sources – updated continuously:
- NVD (NIST) – CVEs, rating (CVSS), affected products
- CISA KEV – vulnerabilities confirmed by CISA as actively exploited
- CISA Vulnrichment – CISA assessment (SSVC) in the official CVE record
- FIRST EPSS – probability of exploitation
- Microsoft MSRC – Patch Tuesday: vulnerabilities, severity, updates
- PoC-in-GitHub – public proof-of-concept repositories
- Metasploit (Rapid7) – modules of the Metasploit Framework
- Exploit-DB (OffSec) – archive of public exploits (links only)
- Patch days: official vendor pages (linked per vendor) (Vendor patch days)
This product uses data from the NVD API but is not endorsed or certified by the NVD. EPSS data © FIRST.org.
Affected? We can help.
We check whether your systems are affected, install updates and close the gap – continuously with the System Health Checker if you wish.