BA
Product
Brocade Active Support Connectivity Gateway
by Brocade · last CVE Oct 8, 2026
13
CVEs
0
On KEV
8.8
Max CVSS
13
New 30D
Severity mix
Critical 0High 10Medium 3Low 0
Watch

Add Brocade Active Support Connectivity Gateway to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-87424
8.8
0%
Oct 8
A vulnerability in the SupportLink API authentication component of Brocade ASCG versions prior to 3.5.0 allows an attacker to bypass authentication across deployments due to the…
Affected: before 3.5.0
CVE-2026-85490
8.8
0%
Oct 8
When Brocade ASCG before 3.5.0 processes support bundle archives ingested from remote compromised endpoints, the application fails to sanitize path traversal sequences contained…
Affected: before 3.5.0
CVE-2026-85489
8.8
0%
Oct 8
An authentication flaw exists in the Brocade ASCG administrative management service component
Affected: before 3.5.0
CVE-2026-85487
8.8
0%
Oct 8
A path traversal vulnerability exists in the HTTP service component of Brocade ASCG versions before 3.5.0
Affected: before 3.5.0
CVE-2026-85423
8.8
0%
Oct 8
A vulnerability has been identified in the data collection service of Brocade ASCG versions before 3.5.0
Affected: before 3.5.0
CVE-2026-85421
8.8
0%
Oct 8
A critical security vulnerability has been identified in Brocade ASCG versions before 3.5.0
Affected: before 3.5.0
CVE-2026-85486
8.0
0%
Oct 8
Brocade ASCG before 3.5.0 improperly processes user input by evaluating form data prior to validation
Affected: before 3.5.0
CVE-2026-87428
7.8
0%
Oct 8
In Brocade ASCG before 3.5.0, a  local unauthorized user on the ASCG VM who can issue a request to the SANnav host network namespace can extract stored management credentials for…
Affected: before 3.5.0
CVE-2026-85488
7.8
0%
Oct 8
Brocade ASCG before 3.5.0 has a well-known Brocade default password embedded in a script distributed to every customer
Affected: before 3.5.0
CVE-2026-85422
7.8
0%
Oct 8
A vulnerability in Brocade ASCG version before 3.5.0 could allow an attacker to obtain a static cryptographic key hardcoded into the software binaries to secure sensitive data at…
Affected: before 3.5.0
Showing 10