CVE-2026-94585

An authentication bypass vulnerability exists in the web management interface of Brocade Fabric OS versions before 9.2.2d running on the MXG610 platform. An unauthenticated, network-adjacent attacker can exploit an unauthenticated endpoint within the Single Sign-On (SSO) workflow to gain administrative access to the device management interface.

Score

CVSS 3.1 8.8 High

Status

Analyzed - sirt@brocade.com

Published

2026-10-08

Last modified

2026-10-14

Weaknesses

CWE-288

Affected products

• Fabric Operating System (Broadcom)
• Fabric Os (Brocade)

References

• https://support.broadcom.com/external/content/SecurityAdvisories/0/39134