What’s Vulnerable › Vulnerabilities

CVE-2026-0869: Application User custom defined accounts are not properly password protected in Brocade ASCG 3.4.0

• Severity: high (CVSS 8.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-03-03 · updated 2026-06-17
• Weakness: CWE-305

Description

Authentication bypass in Brocade ASCG 3.4.0 Could allow an unauthorized user to perform ASCG operations related to Brocade Support Link(BSL) and streaming configuration. and could even disable the ASCG application or disable use of BSL data collection on Brocade switches within the fabric.

Affected products

• Brocade Active Support Connectivity Gateway: 3.4.0

References

• https://support.broadcom.com/external/content/SecurityAdvisories/0/37121

Get alerted when CVE-2026-0869 or the next vulnerability affects your stack