Lucene search
+L

17 matches found

NVD
NVD
•added 2026/10/08 5:17 a.m.•21 views

CVE-2026-94576

An authentication logic and privilege escalation vulnerability exists in the account management interface of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. Under specific conditions, an authenticated user can bypass authorization restrictions intended to prevent modifying...

8CVSS0.00433EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/08 4:34 a.m.•24 views

CVE-2026-94576

A privilege escalation and authentication logic vulnerability exists in the account management interface of Brocade Fabric OS versions prior to 9.2.2d and 10.0.0 through 10.0.0a1 . The root cause is a partial string comparison (CWE-187) that allows an authenticated user to bypass authorization re...

8CVSS5.7AI score0.00433EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2026/10/08 4:34 a.m.•10 views

CVE-2026-94576

An authentication logic and privilege escalation vulnerability exists in the account management interface of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. Under specific conditions, an authenticated user can bypass authorization restrictions intended to prevent modifying...

5.9CVSS5.7AI score0.00433EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/10/08 4:34 a.m.•44 views

CVE-2026-94576

An authentication logic and privilege escalation vulnerability exists in the account management interface of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. Under specific conditions, an authenticated user can bypass authorization restrictions intended to prevent modifying...

5.9CVSS0.00433EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/10/08 4:34 a.m.•13 views

EUVD-2026-94734

An authentication logic and privilege escalation vulnerability exists in the account management interface of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. Under specific conditions, an authenticated user can bypass authorization restrictions intended to prevent modifying...

5.9CVSS5.7AI score0.00433EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/10/08 12:00 a.m.•11 views

PT-2026-107815

An authentication logic and privilege escalation vulnerability exists in the account management interface of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. Under specific conditions, an authenticated user can bypass authorization restrictions intended to prevent modifying...

5.9CVSS5.7AI score0.00433EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/08 12:00 a.m.•7 views

CVE-2026-94576: Partial String Comparison

An authentication logic and privilege escalation vulnerability exists in the account management interface of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. Under specific conditions, an authenticated user can bypass authorization restrictions intended to prevent modifying...

8CVSS5.7AI score0.00433EPSS
SaveExploits0References3
Broadcom
Broadcom
•added 2026/10/06 12:00 a.m.•23 views

Privilege Escalation / Access Control Bypass in Brocade Fabric OS account management interface (CVE-2026-94576)

: An authentication logic and privilege escalation vulnerability exists in the account management interface of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. Under specific conditions, an authenticated user can bypass authorization restrictions intended to prevent modifying...

5.9CVSS5.7AI score0.00433EPSS
SaveExploits0
NVD
NVD
•added 2026/10/02 11:17 a.m.•18 views

CVE-2026-86325

A stack-based buffer overflow vulnerability exists in protocol gateways' account management interface. The vulnerability is caused by insufficient length validation of the accountname parameter when processing account management requests. An attacker authenticated as a read-only user to the...

9.4CVSS0.00339EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/10/02 10:18 a.m.•15 views

EUVD-2026-91371

A stack-based buffer overflow vulnerability exists in protocol gateways' account management interface. The vulnerability is caused by insufficient length validation of the accountname parameter when processing account management requests. An attacker authenticated as a read-only user to the...

9.4CVSS6.7AI score0.00339EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/02 10:18 a.m.•41 views

CVE-2026-86325

A stack-based buffer overflow vulnerability exists in the account management interface of protocol gateways . The root cause is insufficient length validation of the account_name parameter during account management requests. An attacker authenticated as a read-only user to the web management inte...

9.4CVSS6.7AI score0.00339EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/10/02 10:18 a.m.•51 views

CVE-2026-86325

A stack-based buffer overflow vulnerability exists in protocol gateways' account management interface. The vulnerability is caused by insufficient length validation of the accountname parameter when processing account management requests. An attacker authenticated as a read-only user to the...

9.4CVSS0.00339EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/10/02 10:18 a.m.•18 views

CVE-2026-86325

A stack-based buffer overflow vulnerability exists in protocol gateways' account management interface. The vulnerability is caused by insufficient length validation of the accountname parameter when processing account management requests. An attacker authenticated as a read-only user to the...

9.4CVSS6.7AI score0.00339EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/02 12:00 a.m.•10 views

CVE-2026-86325: Stack-based Buffer Overflow

A stack-based buffer overflow vulnerability exists in protocol gateways' account management interface. The vulnerability is caused by insufficient length validation of the accountname parameter when processing account management requests. An attacker authenticated as a read-only user to the...

9.4CVSS6.7AI score0.00339EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/02 12:00 a.m.•18 views

PT-2026-104201

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description A stack-based buffer overflow occurs in the account management interface of protocol gateways. This issue stems from insufficient length validation of the accou...

9.4CVSS6.3AI score0.00339EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2025/03/06 12:00 a.m.•9 views

PT-2025-10002

Name of the Vulnerable Software and Affected Versions Netsweeper Server versions prior to 8.2.7 Description The issue in the account management interface allows unauthorized changes to the Account Owner field due to client-side-only restrictions and a lack of server-side validation. This enables...

8.1CVSS0.00363EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/06 12:00 a.m.•9 views

CVE-2025-25497: Client-Side Enforcement of Server-Side Security

An issue in account management interface in Netsweeper Server v.8.2.6 and earlier fixed in v.8.2.7 allows unauthorized changes to the "Account Owner" field due to client-side-only restrictions and a lack of server-side validation. This vulnerability enables account ownership reassignment to or aw...

8.1CVSS5.9AI score0.00363EPSS
SaveExploits0References1
Rows per page
Query Builder