CVE-2026-87665

What it is

A stack-based buffer overflow vulnerability exists in the Internet Key Exchange (IKEv2) protocol handler on Brocade Fabric OS versions before 10.0.1. The vulnerability occurs when processing initial IKE key exchange requests on extension switches or blades running IPsec-enabled Fibre Channel over IP (FCIP) circuits. An unauthenticated remote attacker can exploit this vulnerability by sending a single, specifically crafted UDP packet (Port 500) containing an oversized Nonce payload. Successful exploitation results in a denial of service (data-plane process crash)

At a glance

Exploitability

Can be exploited from the same network segment without logging in. High risk of service disruption.

Exploit odds

0.8% chance of exploitation in the next 30 days (EPSS).

Fix

A patch, advisory or fixed version is referenced. Upgrade or apply it.

Timeline

1. 2026-10-08 03:16 UTC PublishedDisclosed publicly on CVE.org and NVD
2. 2026-10-13 17:24 UTC Last updatedMost recent change to the record

Details

Published

2026-10-08 03:16 UTC

Last modified

2026-10-13 17:24 UTC

Exploit probability

0.8% · EPSS, next 30 days

Weakness

CWE-121

Record status

Analyzed

Affected

• Broadcom Fabric Operating System < 10.0.1

Attack profile CVSS 4.0 · 6.0

Attack vector

Adjacent network

Complexity

Low

Attack requirements

Present

Privileges needed

None

User interaction

None

Confidentiality

None

Integrity

Low

Availability

High