Signals
Back to database
Schedule42High7.7VulnerabilityCVE-2026-94585No patch link observed

CVE-2026-94585 — An authentication bypass vulnerability exists in the web management interface of Brocade Fabric OS versions before 9.2.2d running on the MXG610 pla…

Published Oct 8, 2026, 05:17 AM UTCIngested 17h agoSource NVD(cve-db)CVE-2026-94585

Description

An authentication bypass vulnerability exists in the web management interface of Brocade Fabric OS versions before 9.2.2d running on the MXG610 platform. An unauthenticated, network-adjacent attacker can exploit an unauthenticated endpoint within the Single Sign-On (SSO) workflow to gain administrative access to the device management interface.

CVSS v4.0 base metrics

CVSS:4.0/AV:A/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
7.7

High severity

Band computed from the CVSS base score, not the source's own label — so it means the same thing across every feed.

AV

Adjacent

Attack Vector

AC

High

Attack Complexity

AT

None

Attack Requirements

PR

None

Privileges Required

UI

None

User Interaction

VC

High

Confidentiality (Vulnerable System)

VI

High

Integrity (Vulnerable System)

VA

High

Availability (Vulnerable System)

SC

None

Confidentiality (Subsequent System)

SI

None

Integrity (Subsequent System)

SA

None

Availability (Subsequent System)

References

Related threats

same CWE or vendor
Critical

CVE-2026-104075 — TVU Networks Receiver/Transceiver devices running firmware before version 7.9 contain an authentication bypass vulnerability in the web management …

CVE-2026-104075 · 3h ago

Medium

CVE-2026-107361 — The Arkime live capture service (arkime-live) in Malcolm runs with network_mode: host, exposing port 8005 on all network interfaces (viewHost=0.0.0…

CVE-2026-107361 · 5h ago

Critical

CVE-2026-107194 — Sungrow iSolarCloud before 2026 allows authentication bypass and account takeover via "login_type":"5" in a login request, potentially leading to "…

CVE-2026-107194 · 1d ago

Critical

CVE-2026-19572 — A security vulnerability has been identified in FlexNet Publisher lmadmin.

CVE-2026-19572 · 2d ago

High

CVE-2026-39793 — Subscriber Broken Authentication in Simple JWT Login 4.0.0 versions.

CVE-2026-39793 · 3d ago

High

CVE-2026-39769 — Unauthenticated Broken Authentication in Graphina <= 3.1.12 versions.

CVE-2026-39769 · 3d ago