Skip to content
CVE PROGRAM SOURCE RECORD5.7 Medium

CVE-2026-94580

An arbitrary file and directory deletion vulnerability exists in the REST API management interface handling USB storage operations on Brocade Fabric OS versions before 10.0.1. An a

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
brocade

Description

An arbitrary file and directory deletion vulnerability exists in the REST API management interface handling USB storage operations on Brocade Fabric OS versions before 10.0.1. An authenticated user possessing USB management privileges can manipulate requested target paths to delete arbitrary files or directories on the switch's local root filesystem, bypassing intended USB mount point boundaries.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Brocade Fabric OS

Default version status: unaffected

  • 0 to < 10.0.1affected

References