A path traversal vulnerability exists in the HTTP service component of Brocade ASCG versions before 3.5.0.

Timeline

Detection, updates, and resolution for this record.

1. Oct 8, 2026 · NIST NVD

   Detected

   A path traversal vulnerability exists in the HTTP service component of Brocade ASCG versions before 3.5.0. An unauthenticated attacker on the local network could send a manipulated API request to the service endpoint bypassing path restrictions to arbitrary file read, file write, or file deletion operations.

2. Oct 14, 2026 · NIST NVD

   Updated

   A path traversal vulnerability exists in the HTTP service component of Brocade ASCG versions before 3.5.0. An unauthenticated attacker on the local network could send a manipulated API request to the service endpoint bypassing path restrictions to arbitrary file read, file write, or file deletion operations.

Affected

• cpe broadcom/brocade active support connectivity gatewayversion unspecified
• vendor Brocade Brocade Active Support Connectivity Gatewayversion unspecified

Sources

• CIRCL Vulnerability LookupVulnerability recordCVE-2026-85487

  A path traversal vulnerability exists in the HTTP service component of Brocade ASCG versions before 3.5.0. An unauthenticated attacker on the local network could send a manipulated API request to the service endpoint bypassing path restrictions to arbitrary file read, file write,

  vulnerability.circl.lu
• CVE.orgVulnerability recordCVE-2026-85487

  Official CVE identifier

  cve.org
• FIRST EPSSExploitation probabilityCVE-2026-85487

  30-day exploitation probability 0.2%

  first.org
• NIST NVDVulnerability recordCVE-2026-85487

  A path traversal vulnerability exists in the HTTP service component of Brocade ASCG versions before 3.5.0. An unauthenticated attacker on the local network could send a manipulated API request to the service endpoint bypassing path restrictions to arbitrary file read, file write,

  nvd.nist.gov

References

• Vendor Advisory · support.broadcom.com