[ CVE-2026-85489 · Published 8 Oct 2026 ]
Vulnerability in Brocade Active Support Connectivity Gateway
CVSS 8.8
EPSS <1%No fix listed yet
[ Description ]Official description
An authentication flaw exists in the Brocade ASCG administrative management service component. An unauthenticated network user can issue direct API requests to perform privileged actions, including accessing sensitive system configuration mapping data, modifying managed device inventories, and altering operational settings. This vulnerability affects all versions of Brocade ASCG before 3.5.0.
[ Fixes ]Fixes and patches
No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.