Authentication Bypass in Brocade Fabric OS on MXG610 Platform
CVE-2026-94585

7.7HIGH

Key Information:

Vendor

Brocade
Status
Fabric Os
Vendor
CVE Published:
8 October 2026

What is CVE-2026-94585?

An authentication bypass vulnerability allows unauthorized network-adjacent attackers to exploit weaknesses in the web management interface of Brocade Fabric OS versions prior to 9.2.2d on the MXG610 platform. By targeting an unauthenticated endpoint in the Single Sign-On (SSO) process, attackers can gain unauthorized administrative access to the device management interface, posing significant risks to network integrity and security.

Affected Version(s)

Fabric OS 0 < 9.2.2d

References

https://support.broadcom.com/external/content/SecurityAdv...

CVSS V4

Score:
7.7
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
High
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.