7.7
High
CVE-2026-94585 An authentication bypass vulnerability exists in the web management interface of Brocade Fabric OS versions before…
Description
An authentication bypass vulnerability exists in the web management interface of Brocade Fabric OS versions before 9.2.2d running on the MXG610 platform. An unauthenticated, network-adjacent attacker can exploit an unauthenticated endpoint within the Single Sign-On (SSO) workflow to gain administrative access to the device management interface.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Fabric OS 9.2 | earliest → < 9.2.2d | 9.2.2d |
Other CVEs of Fabric OS
The 71 CVEs of Fabric OS →
CVE-2026-94587
A buffer overflow vulnerability exists in the WebTools administrative interface handling configuration download or…
6.9
Medium
CVE-2026-94579
An OS command injection vulnerability exists in the PAM (Pluggable Authentication Module) session cleanup routines…
5.4
Medium
CVE-2026-94576
An authentication logic and privilege escalation vulnerability exists in the account management interface of Brocade…
5.9
Medium
CVE-2026-87661
Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 directly accepts Apache configuration file data…
6.8
Medium