CVE-2026-0869 — Application User custom defined accounts are not properly password protected in Brocade ASCG 3.4.0

CVE-2026-0869

Application User custom defined accounts are not properly password protected in Brocade ASCG 3.4.0 PUBLISHED

Description (CNA)

Authentication bypass in Brocade ASCG 3.4.0 Could allow an unauthorized user to perform ASCG operations related to Brocade Support Link(BSL) and streaming configuration. and could even disable the ASCG application or disable use of BSL data collection on Brocade switches within the fabric.

Affected (CNA)

Vendor / product	Versions
Brocade / ASCG	affected 3.4.0

CWE

CWE-305

References

https://support.broadcom.com/external/content/SecurityAdvisories/0/37121

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.