CVE-2026-94583
Received Received - Intake

Race Condition in Brocade Fabric OS REST Interface

Publication date: 2026-10-08

Last updated on: 2026-10-08

Assigner: Brocade Communications Systems, LLC

Description
A race condition vulnerability exists in the request processing logic of the REST management interface on Brocade Fabric OS versions before 10.0.1. When handling concurrent incoming network management FCIP requests, a timing window exists between when a request populates the address variable and when the service constructs and returns the response context. As a result, the first request adopts the modified context, causing the service to return sensitive management details or configuration data belonging to the second context back to the original requester.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-08
Last Modified
2026-10-08
Generated
2026-10-08
AI Q&A
2026-10-08
EPSS Evaluated
N/A
NVD
CVE-2026-94583
EUVD
EUVD-2026-94681

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
Brocade Fabric OS 0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-362 The product contains a concurrent code sequence that requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence operating concurrently.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a race condition vulnerability in Brocade Fabric OS versions before 10.0.1. It occurs when handling concurrent network management FCIP requests. A timing issue causes the first request to receive sensitive management details or configuration data belonging to a second request.

Detection Guidance

This vulnerability involves a race condition in Brocade Fabric OS versions before 10.0.1. Detection requires checking the OS version and monitoring for unusual management interface responses. Use 'version' or 'show version' commands to verify the Fabric OS version. Inspect network logs for duplicate or mismatched management responses.

Impact Analysis

An attacker could exploit this to access sensitive management information or configuration data from other users or requests. This could lead to unauthorized access to system settings or sensitive data.

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive data, potentially violating GDPR (data protection) and HIPAA (health information privacy) requirements. Organizations may face compliance violations and legal consequences.

Mitigation Strategies

Upgrade Brocade Fabric OS to version 10.0.1 or later to address the race condition in the REST management interface.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-94583. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart