Logic Vulnerability in Brocade Fabric OS Web Management Framework

CVE-2026-94575

What is CVE-2026-94575?

A logic flaw in the web management framework of Brocade Fabric OS versions prior to 10.0.1 allows low-privileged authenticated users to bypass vital Role-Based Access Control (RBAC) measures under certain conditions. This exploitation can result in a reduction of the system's authorization mode for the ongoing session, granting access to administrative configuration settings that are typically reserved for privileged users. Proper access controls should be enforced to mitigate such vulnerabilities.

References