CVE-2026-94583: CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') in Brocade Fabric OS

This vulnerability involves a race condition in the request processing logic of the REST management interface on Brocade Fabric OS versions prior to 10.0.1. When multiple FCIP network management requests are handled concurrently, a timing window exists between when a request sets an address variable and when the service constructs and returns the response context. Due to improper synchronization, the first request may receive sensitive management or configuration data intended for the second request, resulting in unintended data disclosure.

The vulnerability can cause sensitive management details or configuration data to be leaked to an unauthorized requester due to the race condition in concurrent request handling. However, the CVSS score of 2.1 and vector indicate low severity with high attack complexity and limited impact scope.

No official patch or vendor advisory is provided in the input data. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, avoid concurrent FCIP management requests or restrict access to the REST management interface to trusted administrators to reduce exposure.