CVE-2026-94582

A memory buffer overflow vulnerability exists in the internal diagnostic and route validation routines used by the Fabric Shortest Path First (FSPF) protocol component of Brocade Fabric OS versions before 10.0.1. While this code path is part of internal diagnostic functionality and is not directly accessible via standard user interfaces or CLI management commands, an input processing flaw allows incoming or internally routed diagnostic state payloads to exceed allocated memory boundaries. An attacker that is able to chain or link other vulnerabilities to exploit this internal diagnostic could cause a heap- or stack-based memory overrun, resulting in a daemon crash (Denial of Service) or potential arbitrary code execution within the context of the routing daemon.

• CWE-120

• https://support.broadcom.com/external/content/SecurityAdvisories/0/39161Vendor Advisory

Published

Oct 8, 2026

Last Modified

Oct 14, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-94577A privilege escalation vulnerability exists in the internal …7.8
• CVE-2026-94578Brocade Fabric OS versions before 10.0.1 contain an authoriz…8.8
• CVE-2026-94579An OS command injection vulnerability exists in the PAM (Plu…8
• CVE-2026-9458A vulnerability was identified in Totolink A8000RU 7.1cu.643…9.8
• CVE-2026-94580An arbitrary file and directory deletion vulnerability exist…4.5
• CVE-2026-94581An OS command injection vulnerability exists in the REST API…6.8
• CVE-2026-94583A race condition vulnerability exists in the request process…2.6
• CVE-2026-94584A race condition and thread-safety vulnerability exists in t…2.6
• CVE-2026-94585An authentication bypass vulnerability exists in the web man…8.8
• CVE-2026-94586A command injection vulnerability exists in the WebTools adm…6.8
• CVE-2026-94587A buffer overflow vulnerability exists in the WebTools admin…4.5
• CVE-2026-94588In Proxmox pmg-api, an argument injection vulnerability exis…4.4