CVE-2026-94575
Received Received - Intake

Logic Bypass in Brocade Fabric OS Web Management

Publication date: 2026-10-08

Last updated on: 2026-10-08

Assigner: Brocade Communications Systems, LLC

Description
A logic vulnerability in Brocade Fabric OS versions before 10.0.1 web management framework allows an authenticated, low-privileged user to bypass inner Role-Based Access Control (RBAC) checks under specific environmental conditions. Successful exploitation lowers the system authorization mode for the active session context, allowing access to restricted configuration settings intended exclusively for administrative roles.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-08
Last Modified
2026-10-08
Generated
2026-10-08
AI Q&A
2026-10-08
EPSS Evaluated
N/A
NVD
CVE-2026-94575
EUVD
EUVD-2026-94682

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
Brocade Fabric OS 0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-483 The code does not explicitly delimit a block that is intended to contain 2 or more statements, creating a logic error.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a logic vulnerability in Brocade Fabric OS versions before 10.0.1. It allows an authenticated low-privileged user to bypass role-based access control checks under specific conditions. Exploitation lowers the authorization mode for the session, granting access to administrative configuration settings.

Impact Analysis

An attacker with low privileges could gain unauthorized access to sensitive configuration settings. This could lead to system misconfigurations, data breaches, or unauthorized changes to network infrastructure.

Mitigation Strategies

Upgrade Brocade Fabric OS to version 10.0.1 or later to address the logic vulnerability in the web management framework.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-94575. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart