EUVD-2026-94731
GHSA-v822-xrfp-fv6q
Severity by source
CVSS:4.0/AV:A/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Network-adjacent management access (AV:A) and vendor-indicated non-trivial conditions (AC:H); unauthenticated SSO endpoint (PR:N/UI:N); admin takeover of the device yields full C/I/A with no scope change.
Primary rating from Vendor (brocade).
CVSS VectorVendor: brocade
Lifecycle Timeline
3DescriptionCVE.org
An authentication bypass vulnerability exists in the web management interface of Brocade Fabric OS versions before 9.2.2d running on the MXG610 platform. An unauthenticated, network-adjacent attacker can exploit an unauthenticated endpoint within the Single Sign-On (SSO) workflow to gain administrative access to the device management interface.
AnalysisAI
Authentication bypass in Brocade Fabric OS versions before 9.2.2d running on the MXG610 extension switch lets a network-adjacent attacker reach an unprotected endpoint in the web management interface's Single Sign-On workflow and obtain administrative access to the device. No credentials or user interaction are required (PR:N/UI:N), although High attack complexity (AC:H) means conditions outside the attacker's control must line up for reliable exploitation, and exposure is confined to MXG610 deployments with a reachable management interface. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
No credit card · 7-day full trial
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires network-adjacent access to the device management interface - the attacker must reach the MXG610's web management network (AV:A), not the public Internet. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | This is a credible but context-limited priority. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Upgrade the affected MXG610 to Brocade Fabric OS 9.2.2d or later, as documented in the vendor advisory at https://support.broadcom.com/external/content/SecurityAdvisories/0/39134 (Vendor-released patch: 9.2.2d); this is the only complete fix because the defect is in the SSO code path itself and cannot be corrected through configuration. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, inventory all Brocade MXG610 switches and identify any running Fabric OS versions before 9.2.2d; immediately restrict management interface access to trusted, dedicated management networks or disable remote web management where operationally feasible, and review logs for unexpected administrative sessions. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Authenticated OS command injection in the management interface and session-processing routines of Brocade Fabric OS allo
Brocade Fabric OS contains an OS command injection flaw in the REST API management interface that lets an authenticated,
OS command injection in the WebTools administrative interface of Brocade Fabric OS lets an authenticated, high-privilege
Stack-based buffer overflow in the SNMP daemon of Brocade Fabric OS (all versions before 10.0.1) lets a remote, unauthen
Command injection in the REST API management interface of Brocade Fabric OS allows an authenticated low-privileged user
Authenticated attackers with access to the adjacent management network can exploit stack-based buffer overflows in the R
An authenticated, low-privileged user in one Virtual Fabric on a Brocade Fabric OS switch can submit a request carrying
Heap corruption in Brocade Fabric OS before 10.0.1 allows an authenticated administrator to crash a SAN switch's managem
Authentication bypass in Brocade Fabric OS 9.2.2d and 10.0.0 through 10.0.0a1 allows a local low-privileged process to f
Local privilege escalation in Brocade Fabric OS (versions before 9.2.2d and 10.0.0 through 10.0.0a1) allows an unprivile
Command injection in the security certificate management component of the Brocade Fabric OS administrative management AP
An arbitrary file-move flaw in the WebTools management interface of Brocade Fabric OS (all builds before 9.2.2d and 10.0
Same technique Authentication Bypass
View allShare
External POC / Exploit Code
Leaving vuln.today