CVE-2026-94587: CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') in Brocade Fabric OS

CVE-2026-94587 is a buffer overflow vulnerability in the WebTools administrative interface of Brocade Fabric OS. It affects versions prior to 9.2.2d and versions 10.0.0 through 10.0.0a1. An authenticated user with configuration download permissions can trigger a stack buffer overflow during configuration download or file transfer operations involving remote server profiles. This overflow can cause the weblinker daemon to crash, leading to denial of service conditions. The vulnerability requires high privileges and does not involve user interaction. No known exploits are reported in the wild, and no patch information is provided.

Successful exploitation allows an authenticated user with high privileges to cause a denial of service by crashing the weblinker daemon via a stack buffer overflow. This impacts system availability but does not indicate direct code execution or data compromise based on the provided information.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict access to the WebTools administrative interface to trusted administrators only and monitor for unusual crashes of the weblinker daemon.