EUVD-2026-94683
GHSA-h3q5-w97j-6289
Severity by source
CVSS:4.0/AV:A/AC:L/AT:P/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Adjacent management-plane access (AV:A), the AT:P precondition maps to AC:H, and USB management privileges force PR:H; impact is arbitrary deletion so I:H with C:N, and A:N is kept to match the vendor though availability loss is plausible.
Primary rating from Vendor (brocade).
CVSS VectorVendor: brocade
Lifecycle Timeline
2DescriptionCVE.org
An arbitrary file and directory deletion vulnerability exists in the REST API management interface handling USB storage operations on Brocade Fabric OS versions before 10.0.1. An authenticated user possessing USB management privileges can manipulate requested target paths to delete arbitrary files or directories on the switch's local root filesystem, bypassing intended USB mount point boundaries.
AnalysisAI
Arbitrary file and directory deletion in Brocade Fabric OS before 10.0.1 lets an authenticated operator who already holds USB management privileges break out of the intended USB mount point through path manipulation in the REST API USB storage handling and remove files or directories anywhere on the switch local root filesystem. The attack surface is narrow: the interface is reachable only from the adjacent management network (AV:A), requires a high-privileged account (PR:H), and the vendor vector includes an additional attack requirement (AT:P), so this is a trusted-operator or stolen-admin-credential scenario rather than an anonymous remote attack. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
No credit card · 7-day full trial
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires an authenticated account holding USB management privileges (PR:H) on the Brocade Fabric OS REST API management interface, adjacent-network access to that management plane (AV:A, not internet-facing by default), and the USB storage operations functionality being reachable; the AT:P metric indicates an additional attacker-controlled precondition is needed. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | This is a medium-severity issue (CVSS 4.0 base 5.7) that should be treated as a low-to-moderate real-world priority rather than an emergency. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Upgrade to Fabric OS 10.0.1, the first release that is not affected, following the per-platform guidance in the vendor advisory at https://support.broadcom.com/external/content/SecurityAdvisories/0/39143. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
Authenticated OS command injection in the management interface and session-processing routines of Brocade Fabric OS allo
Brocade Fabric OS contains an OS command injection flaw in the REST API management interface that lets an authenticated,
OS command injection in the WebTools administrative interface of Brocade Fabric OS lets an authenticated, high-privilege
Stack-based buffer overflow in the SNMP daemon of Brocade Fabric OS (all versions before 10.0.1) lets a remote, unauthen
Command injection in the REST API management interface of Brocade Fabric OS allows an authenticated low-privileged user
Authenticated attackers with access to the adjacent management network can exploit stack-based buffer overflows in the R
An authenticated, low-privileged user in one Virtual Fabric on a Brocade Fabric OS switch can submit a request carrying
Heap corruption in Brocade Fabric OS before 10.0.1 allows an authenticated administrator to crash a SAN switch's managem
Authentication bypass in Brocade Fabric OS 9.2.2d and 10.0.0 through 10.0.0a1 allows a local low-privileged process to f
Local privilege escalation in Brocade Fabric OS (versions before 9.2.2d and 10.0.0 through 10.0.0a1) allows an unprivile
Command injection in the security certificate management component of the Brocade Fabric OS administrative management AP
An arbitrary file-move flaw in the WebTools management interface of Brocade Fabric OS (all builds before 9.2.2d and 10.0
Same weakness CWE-22 – Path Traversal
View allSame technique Path Traversal
View allShare
External POC / Exploit Code
Leaving vuln.today