{"id":"CVE-2026-94578","published":"2026-10-08T03:16:37.840","lastModified":"2026-10-08T20:06:51.340","description":"Brocade Fabric OS versions before 10.0.1 contain an authorization logic vulnerability in the AAA (Authentication, Authorization, and Accounting) integration framework allows remote authenticated users to gain root-equivalent chassis access controls. By returning specific, crafted Vendor-Specific Attributes (VSAs) or directory claims from an external identity provider (such as RADIUS, LDAP, TACACS+, or Federated IDP), an account can bypass administrative role restriction checks during session establishment.","cvssScore":null,"cvssSeverity":null,"cvssVector":null,"cwes":["CWE-269"],"vendors":[],"products":[],"references":[{"url":"https://support.broadcom.com/external/content/SecurityAdvisories/0/39150","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}