A vulnerability in the SupportLink API authentication component of Brocade ASCG versions prior to 3.5.0 allows an attacker to bypass authentication across deployments…

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

1. Oct 8, 2026 · NIST NVD

   Detected

   A vulnerability in the SupportLink API authentication component of Brocade ASCG versions prior to 3.5.0 allows an attacker to bypass authentication across deployments due to the use of a hard coded cryptographic key.

2. Oct 14, 2026 · NIST NVD

   Updated

   A vulnerability in the SupportLink API authentication component of Brocade ASCG versions prior to 3.5.0 allows an attacker to bypass authentication across deployments due to the use of a hard coded cryptographic key.

Affected

• cpe broadcom/brocade active support connectivity gatewayversion unspecified
• vendor Brocade Brocade Active Support Connectivity Gatewayversion unspecified

Sources

• CIRCL Vulnerability LookupVulnerability recordCVE-2026-87424

  A vulnerability in the SupportLink API authentication component of Brocade ASCG versions prior to 3.5.0 allows an attacker to bypass authentication across deployments due to the use of a hard coded cryptographic key.

  vulnerability.circl.lu
• CVE.orgVulnerability recordCVE-2026-87424

  Official CVE identifier

  cve.org
• FIRST EPSSExploitation probabilityCVE-2026-87424

  30-day exploitation probability 0.2%

  first.org
• NIST NVDVulnerability recordCVE-2026-87424

  A vulnerability in the SupportLink API authentication component of Brocade ASCG versions prior to 3.5.0 allows an attacker to bypass authentication across deployments due to the use of a hard coded cryptographic key.

  nvd.nist.gov

References

• Vendor Advisory · support.broadcom.com