Path Traversal Vulnerability in Brocade ASCG Product

CVE-2026-85490

What is CVE-2026-85490?

Brocade ASCG versions before 3.5.0 are susceptible to a path traversal vulnerability when processing support bundle archives from potentially compromised remote endpoints. The processing mechanism does not adequately sanitize path traversal sequences embedded in these archives before extraction. This flaw enables unauthenticated remote attackers to exploit the vulnerability by sending or intercepting malicious archive files, resulting in the ability to write arbitrary files to restricted directories on the host system. Such actions may ultimately lead to unauthorized remote code execution.

References