ZeroDay Findings
Sign inSign up

Findings

CVE-2026-85489

An authentication flaw exists in the Brocade ASCG administrative management service component.

Published Oct 8, 2026 · updated Oct 14, 2026 · Brocade Brocade Active Support Connectivity Gateway

An authentication flaw exists in the Brocade ASCG administrative management service component. An unauthenticated network user can issue direct API requests to perform privileged actions, including accessing sensitive system configuration mapping data, modifying managed device inventories, and altering operational settings. This vulnerability affects all versions of Brocade ASCG before 3.5.0.

Timeline

Detection, updates, and resolution for this record.

  1. Oct 8, 2026 · NIST NVD

    Detected

    An authentication flaw exists in the Brocade ASCG administrative management service component. An unauthenticated network user can issue direct API requests to perform privileged actions, including accessing sensitive system configuration mapping data, modifying managed device inventories, and altering operational settings. This vulnerability affects all versions of Brocade ASCG before 3.5.0.

  2. Oct 14, 2026 · NIST NVD

    Updated

    An authentication flaw exists in the Brocade ASCG administrative management service component. An unauthenticated network user can issue direct API requests to perform privileged actions, including accessing sensitive system configuration mapping data, modifying managed device inventories, and altering operational settings. This vulnerability affects all versions of Brocade ASCG before 3.5.0.

Affected

  • cpe broadcom/brocade active support connectivity gatewayversion unspecified
  • vendor Brocade Brocade Active Support Connectivity Gatewayversion unspecified

Sources

  • CIRCL Vulnerability LookupCVE-2026-85489

    An authentication flaw exists in the Brocade ASCG administrative management service component. An unauthenticated network user can issue direct API requests to perform privileged actions, including accessing sensitive system configuration mapping data, modifying managed device in

    vulnerability.circl.lu
  • CVE.orgCVE-2026-85489

    Official CVE identifier

    cve.org
  • FIRST EPSSCVE-2026-85489

    30-day exploitation probability 0.2%

    first.org
  • NIST NVDCVE-2026-85489

    An authentication flaw exists in the Brocade ASCG administrative management service component. An unauthenticated network user can issue direct API requests to perform privileged actions, including accessing sensitive system configuration mapping data, modifying managed device in

    nvd.nist.gov

References