BaselineWatch
Desk

CVE-2026-94585

7.7 high SSVC exploitation: none Analyzed

An authentication bypass vulnerability exists in the web management interface of Brocade Fabric OS versions before 9.2.2d running on the MXG610 platform. An unauthenticated, network-adjacent attacker can exploit an unauthenticated endpoint within the Single Sign-On (SSO) workflow to gain administrative access to the device management interface.

Fix

Patch, vendor advisory and mitigation references on NVD 1

Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.

Change history 1

  1. First seenCVSS 7.7 · broadcomNVD modified 2026-10-14 19:35

Affected (CPE criteria) 1

  • cpe:2.3:o:broadcom:fabric_operating_system:*:*:*:*:*:*:*:*

References 1