[ CVE-2026-85487 · Published 8 Oct 2026 ]
Vulnerability in Brocade Active Support Connectivity Gateway
CVSS 8.8
EPSS <1%No fix listed yet
[ Description ]Official description
A path traversal vulnerability exists in the HTTP service component of Brocade ASCG versions before 3.5.0. An unauthenticated attacker on the local network could send a manipulated API request to the service endpoint bypassing path restrictions to arbitrary file read, file write, or file deletion operations.
[ Fixes ]Fixes and patches
No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.