CVE-2026-94582
Received Received - Intake

Memory Buffer Overflow in Brocade Fabric OS FSPF

Publication date: 2026-10-08

Last updated on: 2026-10-08

Assigner: Brocade Communications Systems, LLC

Description
A memory buffer overflow vulnerability exists in the internal diagnostic and route validation routines used by the Fabric Shortest Path First (FSPF) protocol component of Brocade Fabric OS versions before 10.0.1. While this code path is part of internal diagnostic functionality and is not directly accessible via standard user interfaces or CLI management commands, an input processing flaw allows incoming or internally routed diagnostic state payloads to exceed allocated memory boundaries. An attacker that is able to chain or link other vulnerabilities to exploit this internal diagnostic could cause a heap- or stack-based memory overrun, resulting in a daemon crash (Denial of Service) or potential arbitrary code execution within the context of the routing daemon.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-08
Last Modified
2026-10-08
Generated
2026-10-08
AI Q&A
2026-10-08
EPSS Evaluated
N/A
NVD
CVE-2026-94582
EUVD
EUVD-2026-94680

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
Brocade Fabric OS 0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-120 The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is a memory buffer overflow in Brocade Fabric OS versions before 10.0.1, specifically in the Fabric Shortest Path First (FSPF) protocol component. It occurs in internal diagnostic and route validation routines where diagnostic state payloads can exceed allocated memory boundaries due to an input processing flaw. While not directly accessible via standard interfaces, an attacker could exploit this by chaining other vulnerabilities to cause a memory overrun, leading to a daemon crash or potential arbitrary code execution.

Detection Guidance

Detection requires monitoring for abnormal memory usage or daemon crashes in Brocade Fabric OS versions before 10.0.1. Check system logs for FSPF-related errors or routing daemon failures. Use commands like 'show system status' or 'show log' in Fabric OS CLI to inspect diagnostic routines and memory states.

Impact Analysis

This vulnerability could allow an attacker to cause a Denial of Service by crashing the routing daemon or execute arbitrary code within the daemon's context. This may disrupt network routing operations and lead to service unavailability or unauthorized system access if combined with other vulnerabilities.

Compliance Impact

This vulnerability could potentially impact compliance with GDPR and HIPAA by enabling denial of service or arbitrary code execution in routing daemons. Such disruptions may lead to unauthorized data access, processing delays, or service unavailability, which are critical concerns under these regulations.

Mitigation Strategies

Upgrade Brocade Fabric OS to version 10.0.1 or later immediately. Disable internal diagnostic routines if not required. Restrict access to routing daemons and monitor for unusual payloads. Apply network segmentation to limit exposure to potential exploit chains.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-94582. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart