Path Traversal Vulnerability in Brocade ASCG HTTP Service
CVE-2026-85487

8.6HIGH

Key Information:

Vendor

Brocade
Status
Brocade Active Support Connectivity Gateway
Vendor
CVE Published:
8 October 2026

What is CVE-2026-85487?

A path traversal vulnerability in the HTTP service component of Brocade ASCG prior to version 3.5.0 allows an unauthenticated attacker within the local network to exploit manipulated API requests. This can lead to unauthorized access and manipulation of files, including the capability to read, write, or delete arbitrary files through bypassing path restrictions, presenting significant security risks.

Affected Version(s)

Brocade Active Support Connectivity Gateway 0 < 3.5.0

References

https://support.broadcom.com/external/content/SecurityAdv...

CVSS V4

Score:
8.6
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
None
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.