BA
Product
Brocade Active Support Connectivity Gateway
13
CVEs
0
On KEV
8.8
Max CVSS
13
New 30D
Severity mix
Critical 0High 10Medium 3Low 0
Watch
Add Brocade Active Support Connectivity Gateway to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-87424 | 8.8 | Oct 8 | A vulnerability in the SupportLink API authentication component of Brocade ASCG versions prior to 3.5.0 allows an attacker to bypass authentication across deployments due to the… Affected: before 3.5.0 |
| CVE-2026-85490 | 8.8 | Oct 8 | When Brocade ASCG before 3.5.0 processes support bundle archives ingested from remote compromised endpoints, the application fails to sanitize path traversal sequences contained… Affected: before 3.5.0 |
| CVE-2026-85489 | 8.8 | Oct 8 | An authentication flaw exists in the Brocade ASCG administrative management service component Affected: before 3.5.0 |
| CVE-2026-85487 | 8.8 | Oct 8 | A path traversal vulnerability exists in the HTTP service component of Brocade ASCG versions before 3.5.0 Affected: before 3.5.0 |
| CVE-2026-85423 | 8.8 | Oct 8 | A vulnerability has been identified in the data collection service of Brocade ASCG versions before 3.5.0 Affected: before 3.5.0 |
| CVE-2026-85421 | 8.8 | Oct 8 | A critical security vulnerability has been identified in Brocade ASCG versions before 3.5.0 Affected: before 3.5.0 |
| CVE-2026-85486 | 8.0 | Oct 8 | Brocade ASCG before 3.5.0 improperly processes user input by evaluating form data prior to validation Affected: before 3.5.0 |
| CVE-2026-87428 | 7.8 | Oct 8 | In Brocade ASCG before 3.5.0, a local unauthorized user on the ASCG VM who can issue a request to the SANnav host network namespace can extract stored management credentials for… Affected: before 3.5.0 |
| CVE-2026-85488 | 7.8 | Oct 8 | Brocade ASCG before 3.5.0 has a well-known Brocade default password embedded in a script distributed to every customer Affected: before 3.5.0 |
| CVE-2026-85422 | 7.8 | Oct 8 | A vulnerability in Brocade ASCG version before 3.5.0 could allow an attacker to obtain a static cryptographic key hardcoded into the software binaries to secure sensitive data at… Affected: before 3.5.0 |
Showing 10
