CVE-2026-85486
Brocade ASCG before 3.5.0 improperly processes user input by evaluating form data prior to validation.
Published Oct 8, 2026 · updated Oct 14, 2026 · Brocade Brocade Active Support Connectivity Gateway
Brocade ASCG before 3.5.0 improperly processes user input by evaluating form data prior to validation. When an authenticated user submits a configuration form, the submitted text could immediately be processed. A malicious actor with basic access can supply crafted input to execute arbitrary code on the server and take control of the application.
Timeline
Detection, updates, and resolution for this record.
Oct 8, 2026 · NIST NVD
Detected
Brocade ASCG before 3.5.0 improperly processes user input by evaluating form data prior to validation. When an authenticated user submits a configuration form, the submitted text could immediately be processed. A malicious actor with basic access can supply crafted input to execute arbitrary code on the server and take control of the application.
Oct 14, 2026 · NIST NVD
Updated
Brocade ASCG before 3.5.0 improperly processes user input by evaluating form data prior to validation. When an authenticated user submits a configuration form, the submitted text could immediately be processed. A malicious actor with basic access can supply crafted input to execute arbitrary code on the server and take control of the application.
Affected
- cpe broadcom/brocade active support connectivity gatewayversion unspecified
- vendor Brocade Brocade Active Support Connectivity Gatewayversion unspecified
Sources
- CIRCL Vulnerability LookupCVE-2026-85486
Brocade ASCG before 3.5.0 improperly processes user input by evaluating form data prior to validation. When an authenticated user submits a configuration form, the submitted text could immediately be processed. A malicious actor with basic access can supply crafted input to execu
vulnerability.circl.lu - CVE.orgCVE-2026-85486
Official CVE identifier
cve.org - FIRST EPSSCVE-2026-85486
30-day exploitation probability 0.2%
first.org - NIST NVDCVE-2026-85486
Brocade ASCG before 3.5.0 improperly processes user input by evaluating form data prior to validation. When an authenticated user submits a configuration form, the submitted text could immediately be processed. A malicious actor with basic access can supply crafted input to execu
nvd.nist.gov