CVE-2026-94584

LowCVSS 2.6/10Last modified Oct 14, 2026

Description

A race condition and thread-safety vulnerability exists in the web management daemon of Brocade Fabric OS versions before 10.0.1. When handling user authentication requests across a multi-threaded execution pool, this race condition causes PAM modules to process stale or incorrect client IP addresses and switch context numbers. This leads to inaccurate audit records and potential access control bypasses where AAA evaluation or Calling-Station-ID ACL policies rely on client IP attributes.

Metrics

CVSS 3.1 2.6/10CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N

Weakness enumeration

CWE-362

Affected software

No affected versions have been published.

Timeline

Published: Oct 8, 2026
Last modified: Oct 14, 2026
NVD status: Analyzed

Related CVEs from 2026

CVE-2026-945858.8An authentication bypass vulnerability exists in the web management interface of Brocade Fabric OS versions before 9.2.2d running on the MXG CVE-2026-945866.8A command injection vulnerability exists in the WebTools administrative interface handling configuration download or file transfer operation CVE-2026-945874.5A buffer overflow vulnerability exists in the WebTools administrative interface handling configuration download or file transfer operations CVE-2026-945884.4In Proxmox pmg-api, an argument injection vulnerability exists in the package changelog retrieval functionality. This is caused by improper CVE-2026-945899.8The Extensions For CF7 (Contact form 7 Database, Conditional Fields and Redirection) plugin for WordPress is vulnerable to Arbitrary File Up CVE-2026-94598.8A security flaw has been discovered in Edimax EW-7438RPn 1.31. This affects the function formConnectionSetting of the file /goform/formConne CVE-2026-945906.5Improper Verification of Source of a Communication Channel vulnerability in CodePeople2 Sell Downloads sell-downloads allows Exploitation of CVE-2026-945918.4Armatura One stores database and message-broker credentials in an install configuration file, encrypting them with AES-128-CBC when this pro CVE-2026-945928.4Armatura One's database initialization routine assigns a fixed, vendor-defined password to the database superuser account at creation time, CVE-2026-945937.8Armatura One's backup and restore routine records the full database connection command, including the superuser password, in plain text in a CVE-2026-945944.0Armatura One's message broker logs client connection credentials and the associated password in plain text during normal operation. Any part CVE-2026-94608.8A weakness has been identified in Edimax EW-7438RPn 1.31. This impacts the function formAccept of the file /goform/formAccept. Executing a m