Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2026-94578

Brocade Fabric OS versions before 10.0.1 contain an authorization logic vulnerability in the AAA (Authentication, Authorization, and Accounting) integration framework allows remote authenticated users to gain root-equivalent chassis access controls. By returning specific, crafted Vendor-Specific Attributes (VSAs) or directory claims from an external identity provider (such as RADIUS, LDAP, TACACS+, or Federated IDP), an account can bypass administrative role restriction checks during session establishment.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 13.6%
CVSS Severity
CVSS v3 Score 8.8
Products affected by CVE-2026-94578


Contact Us

Shodan ® - All rights reserved