ZeroDay Findings
Sign inSign up

Findings

CVE-2026-94576

An authentication logic and privilege escalation vulnerability exists in the account management interface of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1.

Published Oct 8, 2026 · updated Oct 14, 2026 · broadcom fabric operating system

An authentication logic and privilege escalation vulnerability exists in the account management interface of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. Under specific conditions, an authenticated user can bypass authorization restrictions intended to prevent modifying another account's access privileges. Exploitation allows a lower-privileged user to assign administrative roles to a target account, leading to localized privilege escalation.

Timeline

Detection, updates, and resolution for this record.

  1. Oct 8, 2026 · NIST NVD

    Detected

    An authentication logic and privilege escalation vulnerability exists in the account management interface of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. Under specific conditions, an authenticated user can bypass authorization restrictions intended to prevent modifying another account's access privileges. Exploitation allows a lower-privileged user to assign administrativ

  2. Oct 14, 2026 · NIST NVD

    Updated

    An authentication logic and privilege escalation vulnerability exists in the account management interface of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. Under specific conditions, an authenticated user can bypass authorization restrictions intended to prevent modifying another account's access privileges. Exploitation allows a lower-privileged user to assign administrativ

Affected

  • cpe broadcom/fabric operating systemversion unspecified

Sources

  • CVE.orgVulnerability recordCVE-2026-94576

    Official CVE identifier

    cve.org
  • FIRST EPSSExploitation probabilityCVE-2026-94576

    30-day exploitation probability 0.4%

    first.org
  • NIST NVDVulnerability recordCVE-2026-94576

    An authentication logic and privilege escalation vulnerability exists in the account management interface of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. Under specific conditions, an authenticated user can bypass authorization restrictions intended to pr

    nvd.nist.gov

References