EUVD-2026-94655
GHSA-h7f4-226j-w5j6
Severity by source
CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Requires an authenticated read-only account (PR:L) reachable over the management/adjacent network (AV:A); scope unchanged (S:U) with high integrity/availability and limited confidentiality impact on the device.
Primary rating from Vendor (brocade).
CVSS VectorVendor: brocade
Lifecycle Timeline
3DescriptionCVE.org
An Access Control Bypass vulnerability exists in the Role-Based Access Control (RBAC) validation engine of Brocade Fabric OS versions before 10.0.1. When processing certain management protocol operations, the RBAC engine incorrectly categorizes non-standard action opcodes during permission checks. This allows authenticated users with read-only management privileges to bypass access controls and execute restricted administrative operations.
AnalysisAI
Read-only management accounts on Brocade Fabric OS switches can escalate to restricted administrative operations by submitting management-protocol requests whose non-standard action opcodes the RBAC validation engine mis-categorizes during its permission check; the flaw affects Fabric OS releases before 10.0.1 and is scored CVSS 4.0 base 7.1 (CWE-269, improved privilege management failure). Exploitation is gated: an attacker must already hold a valid authenticated read-only management account (PR:L) and be positioned on an adjacent/management network (AV:A) to reach the affected management plane, with no user interaction required (UI:N). …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
No credit card · 7-day full trial
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires (1) a valid authenticated management account with read-only management privileges on the device, and (2) network adjacency to the switch management interface (CVSS AV:A - typically the management/out-of-band network, not the open internet). … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | This is a moderate-severity privilege escalation flaw (CVSS 4.0 base 7.1, CWE-269) whose practical risk is meaningfully gated by access prerequisites. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | The primary fix is to upgrade affected switches to Brocade Fabric OS 10.0.1 or a later release, which is the first version outside the affected "before 10.0.1" range; follow the Broadcom/Brocade security advisory at https://support.broadcom.com/external/content/SecurityAdvisories/0/39075 for the vendor-confirmed fixed release and upgrade sequencing, since Fabric OS upgrades on directors and fabrics are disruptive and should be staged through the standard maintenance process. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
No vendor-released patch identified at time of analysis. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Authenticated OS command injection in the management interface and session-processing routines of Brocade Fabric OS allo
Brocade Fabric OS contains an OS command injection flaw in the REST API management interface that lets an authenticated,
OS command injection in the WebTools administrative interface of Brocade Fabric OS lets an authenticated, high-privilege
Stack-based buffer overflow in the SNMP daemon of Brocade Fabric OS (all versions before 10.0.1) lets a remote, unauthen
Command injection in the REST API management interface of Brocade Fabric OS allows an authenticated low-privileged user
Authenticated attackers with access to the adjacent management network can exploit stack-based buffer overflows in the R
An authenticated, low-privileged user in one Virtual Fabric on a Brocade Fabric OS switch can submit a request carrying
Heap corruption in Brocade Fabric OS before 10.0.1 allows an authenticated administrator to crash a SAN switch's managem
Authentication bypass in Brocade Fabric OS 9.2.2d and 10.0.0 through 10.0.0a1 allows a local low-privileged process to f
Local privilege escalation in Brocade Fabric OS (versions before 9.2.2d and 10.0.0 through 10.0.0a1) allows an unprivile
Command injection in the security certificate management component of the Brocade Fabric OS administrative management AP
An arbitrary file-move flaw in the WebTools management interface of Brocade Fabric OS (all builds before 9.2.2d and 10.0
Same weakness CWE-269 – Improper Privilege Management
View allSame technique Privilege Escalation
View allShare
External POC / Exploit Code
Leaving vuln.today