Skip to content
fr Sign in
2.1 Low

CVE-2026-94583 A race condition vulnerability exists in the request processing logic of the REST management interface on Brocade Fabric…

Description

A race condition vulnerability exists in the request processing logic of the REST management interface on Brocade Fabric OS versions before 10.0.1. When handling concurrent incoming network management FCIP requests, a timing window exists between when a request populates the address variable and when the service constructs and returns the response context. As a result, the first request adopts the modified context, causing the service to return sensitive management details or configuration data belonging to the second context back to the original requester.

Affected products and versions

Product Affected versions Fixed in
Fabric OS 10.0 earliest → < 10.0.1 10.0.1

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Fabric OS

The 71 CVEs of Fabric OS →
CVE-2026-94585 An authentication bypass vulnerability exists in the web management interface of Brocade Fabric OS versions before… 7.7 High CVE-2026-94587 A buffer overflow vulnerability exists in the WebTools administrative interface handling configuration download or… 6.9 Medium CVE-2026-94579 An OS command injection vulnerability exists in the PAM (Pluggable Authentication Module) session cleanup routines… 5.4 Medium CVE-2026-94576 An authentication logic and privilege escalation vulnerability exists in the account management interface of Brocade… 5.9 Medium
Track this CVE