VDB
CVE-2026-94575
CVE-2026-94575
PUBLISHED
CVSS 6.9 MEDIUM
Reported by brocade · Published October 8, 2026
A logic vulnerability in Brocade Fabric OS versions before 10.0.1 web management framework allows an authenticated, low-privileged user to bypass inner Role-Based Access Control (RBAC) checks under specific environmental conditions. Successful exploitation lowers the system authorization mode for the active session context, allowing access to restricted configuration settings intended exclusively for administrative roles.
Risk Scores
CVSS 4.0
6.9
CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Brocade | Fabric OS | 0 |
| Brocade | Fabric OS | 0 |
Timeline
- Oct 8, 2026 EPSS Score
- Oct 8, 2026 Coalition ESS Score
- Oct 8, 2026 CVE Published
- Oct 8, 2026 CVE Updated
- Oct 14, 2026 EPSS Score
- Oct 15, 2026 EPSS Score