8.5
Élevée
CVE-2026-94586 A command injection vulnerability exists in the WebTools administrative interface handling configuration download or…
Description
A command injection vulnerability exists in the WebTools administrative interface handling configuration download or file transfer operations of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. An authenticated user with permissions to perform configuration downloads using remote server profiles can supply malicious parameter strings to execute arbitrary shell commands on the switch with root privileges
Produits et versions touchés
Autres CVE de Fabric OS
Les 71 CVE de Fabric OS →
CVE-2026-94585
An authentication bypass vulnerability exists in the web management interface of Brocade Fabric OS versions before…
7.7
Élevée
CVE-2026-94587
A buffer overflow vulnerability exists in the WebTools administrative interface handling configuration download or…
6.9
Moyenne
CVE-2026-94579
An OS command injection vulnerability exists in the PAM (Pluggable Authentication Module) session cleanup routines…
5.4
Moyenne
CVE-2026-94576
An authentication logic and privilege escalation vulnerability exists in the account management interface of Brocade…
5.9
Moyenne