CVE-2026-94578: High severity Brocade Fabric OS vulnerability
Brocade Fabric OS versions before 10.0.1 contain an authorization logic vulnerability in the AAA (Authentication, Authorization, and Accounting) integration framework allows remote authenticated users to gain root-equivalent chassis access controls. By returning specific, crafted Vendor-Specific Attributes (VSAs) or directory claims from an external identity provider (such as RADIUS, LDAP, TACACS+, or Federated IDP), an account can bypass administrative role restriction checks during session establishment.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Brocade Fabric OSto a version that resolves this vulnerability.Fixed in 10.0.1
Event History
Frequently Asked Questions
Which systems are affected?
Brocade Fabric OS versions earlier than 10.0.1 are affected when using the AAA integration framework with an external identity provider such as RADIUS, LDAP, TACACS+, or a Federated IDP.
What does an attacker need to exploit this issue?
The attacker must be remotely authenticated and must be able to cause specific crafted Vendor-Specific Attributes or directory claims to be returned by the external identity provider during session establishment.
What access can exploitation provide?
Successful exploitation can bypass administrative role restriction checks and grant root-equivalent chassis access controls.