---
id: CVE-2026-94577
title: >-
  A privilege escalation vulnerability exists in the internal Command-Line
  Interface (CLI) authorization handling mechanism of Brocade Fabric OS versions
  before 9.2.2d and 10.0.0 through 10.0.0a1
summary: >-
  A privilege escalation vulnerability exists in the internal Command-Line
  Interface (CLI) authorization handling mechanism of Brocade Fabric OS versions
  before 9.2.2d and 10.0.0 through 10.0.0a1. An authenticated user or local
  process tha…
severity: high
cvss: 7.8
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'
cwe:
  - CWE-15
vendor: broadcom
product: fabric_operating_system
affected:
  - fabric_operating_system < 9.2.2d
  - 'fabric_operating_system >= 10.0.0, < 10.0.1'
patched:
  - fabric_operating_system 10.0.1
published: '2026-10-08'
updated: '2026-10-14'
sourceUpdated: '2026-10-14T19:34:37.953'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-94577'
references:
  - url: 'https://support.broadcom.com/external/content/SecurityAdvisories/0/39154'
    label: sirt@brocade.com
tags:
  - nvd
  - cve.org
epss: 0.00101
epssPercentile: 0.00874
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: total
  timestamp: '2026-10-08T15:18:56.735745Z'
scores:
  nvd: 7.8
  cna: 7.3
ingestedAt: '2026-10-08T05:05:36.681Z'
---

## Overview

A privilege escalation vulnerability exists in the internal Command-Line Interface (CLI) authorization handling mechanism of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. An authenticated user or local process that can manipulate the process execution environment can bypass Role-Based Access Control (RBAC) validation checks. Successful exploitation allows an attacker to elevate privileges to root

## Affected

- `fabric_operating_system < 9.2.2d`
- `fabric_operating_system >= 10.0.0, < 10.0.1`

## Remediation

Upgrade past the affected range:

- `fabric_operating_system 10.0.1`