Authentication Bypass in Brocade ASCG from Broadcom

CVE-2026-85421

What is CVE-2026-85421?

An authentication bypass vulnerability has been discovered in the Brocade ASCG product, affecting versions prior to 3.5.0. This flaw allows unauthenticated attackers with network access to exploit the HTTPS service, failing to enforce proper authentication or access control measures. As a result, such attackers can issue control commands, alter cluster states, and modify system configurations, potentially resulting in a total compromise of the control plane for the streaming service. This poses significant risks to the integrity and availability of the service.

References