Authentication Flaw in Brocade ASCG Management Service
CVE-2026-85489

8.7HIGH

Key Information:

Vendor

Brocade
Status
Brocade Active Support Connectivity Gateway
Vendor
CVE Published:
8 October 2026

What is CVE-2026-85489?

In the Brocade ASCG administrative management service, a flaw allows unauthenticated network users to execute direct API requests. This vulnerability enables unauthorized personnel to perform privileged actions such as accessing sensitive system configuration data, modifying managed device inventories, and altering operational settings, thus presenting significant security risks.

Affected Version(s)

Brocade Active Support Connectivity Gateway 0 < 3.5.0

References

https://support.broadcom.com/external/content/SecurityAdv...

CVSS V4

Score:
8.7
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
Low
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.