CVE-2026-87428 — Brocade / Brocade Active Support Connectivity Gateway

CVE-2026-87428

Brocade / Brocade Active Support Connectivity Gateway PUBLISHED

Description (CNA)

In Brocade ASCG before 3.5.0, a local unauthorized user on the ASCG VM who can issue a request to the SANnav host network namespace can extract stored management credentials for onboarded SANnav instances and compromise connected Brocade SANnav servers or managed Brocade Fibre Channel switches.

Affected (CNA)

Vendor / product	Versions
Brocade / Brocade Active Support Connectivity Gateway	affected 0 before 3.5.0

CWE

CWE-522

References

https://support.broadcom.com/external/content/SecurityAdvisories/0/38390

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.