What is GHSA-rcgg-cjm3-3p46?

GHSA-rcgg-cjm3-3p46 is a security advisory published by GitHub Security Advisories with Medium severity. An OS command injection vulnerability exists in the PAM (Pluggable Authentication Module) session...

Which CVE IDs does GHSA-rcgg-cjm3-3p46 cover?

GHSA-rcgg-cjm3-3p46 covers the following CVE IDs: CVE-2026-94579. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

GHSA-rcgg-cjm3-3p46Medium

An OS command injection vulnerability exists in the PAM (Pluggable Authentication Module) session...

Vendor

GitHub Security Advisories

Published

October 8, 2026

Last Modified

October 8, 2026

🔗 CVE IDs covered (1)

CVE-2026-94579 →

📋 Description

An OS command injection vulnerability exists in the PAM (Pluggable Authentication Module) session cleanup routines during SSH session termination on Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. An authenticated user authenticating via an external directory or AAA service whose username or profile identifier contains shell metacharacters can trigger arbitrary command execution with root privileges when their remote SSH session closes.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-94579
https://support.broadcom.com/external/content/SecurityAdvisories/0/39147
https://github.com/advisories/GHSA-rcgg-cjm3-3p46