Authentication Bypass in Brocade ASCG Data Collection Service

CVE-2026-85423

What is CVE-2026-85423?

A vulnerability has been discovered in the data collection service of Brocade ASCG prior to version 3.5.0. This flaw occurs due to the absence of appropriate authentication and authorization checks on an API endpoint, allowing an attacker with network access the ability to manipulate the service. Consequently, unauthorized SSH connections can be established to arbitrary hosts, enabling the execution of any system command. This vulnerability effectively allows the appliance to function as an unauthenticated proxy, posing significant security risks.

References