[ CVE-2026-85422 · Published 8 Oct 2026 ]
Vulnerability in Brocade Active Support Connectivity Gateway
CVSS 7.8
EPSS <1%No fix listed yet
[ Description ]Official description
A vulnerability in Brocade ASCG version before 3.5.0 could allow an attacker to obtain a static cryptographic key hardcoded into the software binaries to secure sensitive data at rest and to protect inter-node communication protocols. An attacker who extracts this key can decrypt stored management credentials or craft forged administrative synchronization messages.
[ Fixes ]Fixes and patches
No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.