EUVD-2026-94668
GHSA-6h29-8pxc-j4qg
Severity by source
CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Authentication is bypassed on the target (PR:N, CWE-306); but a pre-compromised trusted peer switch and inband FC fabric adjacency are required, so AV:A and AC:H; full admin impact gives C/I/A:H.
Primary rating from Vendor (brocade).
CVSS VectorVendor: brocade
Lifecycle Timeline
3DescriptionCVE.org
A critical authorization bypass vulnerability exists in the Management Server handling of Brocade Fabric OS versions before 10.0.1. A compromised switch connected to the fabric can transmit crafted inband Fibre Channel vendor-unique CT (Common Transport) management requests to bypass administrative authentication. Successful exploitation allows an unauthorized peer switch to execute administrative actions on the target device, including resetting administrative passwords, initiating system reboots, and triggering firmware downloads.
AnalysisAI
Brocade Fabric OS Management Server before version 10.0.1 can be manipulated by a compromised or rogue Fibre Channel switch that is already trusted within the fabric, which uses crafted inband vendor-unique Common Transport (CT) management requests to bypass administrative authentication. This lets the unauthorized peer perform sensitive administrative actions on the target device, including resetting administrative passwords, rebooting the system, and initiating firmware downloads. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
No credit card · 7-day full trial
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires the attacker to control a Fibre Channel switch that is already connected to and trusted within the target's fabric (a compromised or rogue peer switch), and to send crafted inband vendor-unique CT (Common Transport) management requests to the target's Management Server - this is NOT a network/IP-reachable attack and cannot be launched from outside the FC fabric. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | Signals are moderate and partly conflicting. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Apply the vendor-released patch by upgrading Brocade Fabric OS to version 10.0.1 or later; the fix is documented in Broadcom's advisory at https://support.broadcom.com/external/content/SecurityAdvisories/0/39153. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, identify all Brocade Fabric OS Management Server instances running versions prior to 10.0.1, enable detailed logging of Common Transport (CT) management requests, and restrict fabric access to only trusted switches while isolating management interfaces from untrusted networks. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Authenticated OS command injection in the management interface and session-processing routines of Brocade Fabric OS allo
Brocade Fabric OS contains an OS command injection flaw in the REST API management interface that lets an authenticated,
OS command injection in the WebTools administrative interface of Brocade Fabric OS lets an authenticated, high-privilege
Stack-based buffer overflow in the SNMP daemon of Brocade Fabric OS (all versions before 10.0.1) lets a remote, unauthen
Command injection in the REST API management interface of Brocade Fabric OS allows an authenticated low-privileged user
Authenticated attackers with access to the adjacent management network can exploit stack-based buffer overflows in the R
An authenticated, low-privileged user in one Virtual Fabric on a Brocade Fabric OS switch can submit a request carrying
Heap corruption in Brocade Fabric OS before 10.0.1 allows an authenticated administrator to crash a SAN switch's managem
Authentication bypass in Brocade Fabric OS 9.2.2d and 10.0.0 through 10.0.0a1 allows a local low-privileged process to f
Local privilege escalation in Brocade Fabric OS (versions before 9.2.2d and 10.0.0 through 10.0.0a1) allows an unprivile
Command injection in the security certificate management component of the Brocade Fabric OS administrative management AP
An arbitrary file-move flaw in the WebTools management interface of Brocade Fabric OS (all builds before 9.2.2d and 10.0
Same technique Authentication Bypass
View allShare
External POC / Exploit Code
Leaving vuln.today