Brocade Brocade Active Support Connectivity Gateway
13 CVEs affecting Brocade Brocade Active Support Connectivity Gateway. Latest disclosed: 2026-10-08. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-87428 | | 2026-10-08 | In Brocade ASCG before 3.5.0, a local unauthorized user on the ASCG VM who can issue a request to the SANnav host network namespace can extract stored managem… | |
CVE-2026-87426 | | 2026-10-08 | An unauthenticated network-based attacker can query specific internal management endpoints on Brocade ASCG versions before 3.5.0 to enumerate the configuration… | |
CVE-2026-87425 | | 2026-10-08 | An unauthenticated remote attacker can modify the TLS client trust store in Brocade ASCG versions before 3.5.0. By supplying an unauthorized Certificate Author… | |
CVE-2026-87424 | | 2026-10-08 | A vulnerability in the SupportLink API authentication component of Brocade ASCG versions prior to 3.5.0 allows an attacker to bypass authentication across depl… | |
CVE-2026-85490 | | 2026-10-08 | When Brocade ASCG before 3.5.0 processes support bundle archives ingested from remote compromised endpoints, the application fails to sanitize path traversal s… | |
CVE-2026-85489 | | 2026-10-08 | An authentication flaw exists in the Brocade ASCG administrative management service component. An unauthenticated network user can issue direct API requests to… | |
CVE-2026-85488 | | 2026-10-08 | Brocade ASCG before 3.5.0 has a well-known Brocade default password embedded in a script distributed to every customer. Any local authenticated user with read… | |
CVE-2026-85487 | | 2026-10-08 | A path traversal vulnerability exists in the HTTP service component of Brocade ASCG versions before 3.5.0. An unauthenticated attacker on the local network cou… | |
CVE-2026-85486 | | 2026-10-08 | Brocade ASCG before 3.5.0 improperly processes user input by evaluating form data prior to validation. When an authenticated user submits a configuration form… | |
CVE-2026-85423 | | 2026-10-08 | A vulnerability has been identified in the data collection service of Brocade ASCG versions before 3.5.0. An API endpoint within the data collector service fai… | |
CVE-2026-85422 | | 2026-10-08 | A vulnerability in Brocade ASCG version before 3.5.0 could allow an attacker to obtain a static cryptographic key hardcoded into the software binaries to secur… | |
CVE-2026-85421 | | 2026-10-08 | A critical security vulnerability has been identified in Brocade ASCG versions before 3.5.0. The HTTPS service fails to properly enforce authentication or acce… | |
CVE-2023-5649 | | 2026-10-08 | An Improper Input Validation vulnerability for the registered case credentials in Brocade ASCG before v3.0 could allow a local authenticated user to provide in… |