CVE-2026-85487 — Brocade / Brocade Active Support Connectivity Gateway

CVE-2026-85487

Brocade / Brocade Active Support Connectivity Gateway PUBLISHED

Description (CNA)

A path traversal vulnerability exists in the HTTP service component of Brocade ASCG versions before 3.5.0. An unauthenticated attacker on the local network could send a manipulated API request to the service endpoint bypassing path restrictions to arbitrary file read, file write, or file deletion operations.

Affected (CNA)

Vendor / product	Versions
Brocade / Brocade Active Support Connectivity Gateway	affected 0 before 3.5.0

CWE

CWE-22

References

https://support.broadcom.com/external/content/SecurityAdvisories/0/38383

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.