CVE-2026-85422 — Brocade / Brocade Active Support Connectivity Gateway

CVE-2026-85422

Brocade / Brocade Active Support Connectivity Gateway PUBLISHED

Description (CNA)

A vulnerability in Brocade ASCG version before 3.5.0 could allow an attacker to obtain a static cryptographic key hardcoded into the software binaries to secure sensitive data at rest and to protect inter-node communication protocols. An attacker who extracts this key can decrypt stored management credentials or craft forged administrative synchronization messages.

Affected (CNA)

Vendor / product	Versions
Brocade / Brocade Active Support Connectivity Gateway	affected 0 before 3.5.0

CWE

CWE-798

References

https://support.broadcom.com/external/content/SecurityAdvisories/0/38379

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.