CVE-2026-94575: CWE-483: Incorrect Block Delimitation in Brocade Fabric OS
Description
CVE-2026-94575 is a logic vulnerability in Brocade Fabric OS web management framework versions before 10.0.1. It allows an authenticated, low-privileged user to bypass internal Role-Based Access Control (RBAC) checks under certain conditions. Exploiting this flaw lowers the system authorization mode for the active session, granting access to configuration settings meant only for administrators.
CVSS v4.0
Score 6.9medium
Affected software
Brocade
Fabric OS
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability (CWE-483: Incorrect Block Delimitation) affects Brocade Fabric OS versions prior to 10.0.1. It involves a logic error in the web management framework that enables an authenticated user with low privileges to bypass inner RBAC checks under specific environmental conditions. Successful exploitation results in the active session's authorization level being reduced, allowing unauthorized access to restricted administrative configuration settings.
Potential Impact
An attacker with valid low-privileged credentials can escalate their access within the system by bypassing RBAC controls. This leads to unauthorized access to sensitive configuration settings that should be restricted to administrative roles, potentially compromising system integrity and security management.
Mitigation Recommendations
A fixed version 10.0.1 or later addresses this vulnerability. Users should upgrade to Fabric OS version 10.0.1 or above to remediate this issue. Since no vendor advisory or patch link is provided, verify the patch availability with the vendor to confirm the fix status.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- brocade
- Date Reserved
- 2026-09-21T20:29:06.560Z
- Cvss Version
- 4.0
- State
- PUBLISHED
Threat ID: 6ac712a42cdf04f656dce44c
Added to database: 10/08/2026, 03:48:52 UTC
Last enriched: 10/08/2026, 04:03:44 UTC
Last updated: 10/08/2026, 04:08:15 UTC
Views: 2
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.