OCTOBER 13, 2026
Live Feed
Back to database
Case File

CVE-2026-94583

LOW · CVSS 2.1 EPSS 0.11%

Source: NVD + CISA KEV + EPSS · Published 2026-10-08 · Last synced 2026-10-13

CyberRota Analysis

AI-Generated

A race condition vulnerability in the REST management interface of Brocade Fabric OS versions prior to 10.0.1 allows an attacker to exploit concurrent FCIP requests, potentially exposing sensitive management details or configuration data from one request to another. This could lead to unauthorized access to critical information, impacting system integrity and confidentiality. Organizations using affected versions of Brocade Fabric OS should prioritize patching to mitigate this risk.

CVE
CVE-2026-94583
Severity
LOW
CVSS
2.1
EPSS
0.11%

Original NVD Description

A race condition vulnerability exists in the request processing logic of the REST management interface on Brocade Fabric OS versions before 10.0.1. When handling concurrent incoming network management FCIP requests, a timing window exists between when a request populates the address variable and when the service constructs and returns the response context. As a result, the first request adopts the modified context, causing the service to return sensitive management details or configuration data belonging to the second context back to the original requester.