brocade active support connectivity gateway vulnerabilities and fixes

Recent CVEs affecting brocade active support connectivity gateway, with upgrade or downgrade steps. 14 tracked.

Also searched as: brocadeactivesupportconnectivitygateway.

brocade active support connectivity gateway has 14 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 14. Most recent: 2026-10-08. Highest priority: CVE-2026-85490 (score 37/100).

• CVE-2023-5649 MEDIUM 5.5 UPGRADE An Improper Input Validation vulnerability for the registered case credentials in Brocade ASCG before v3.0 cou
• CVE-2023-5648 MEDIUM 6.1 UPGRADE In Brocade ASCG before Brocade ASCG v3.0, several security-related HTTP Headers were missing in various Brocad
• CVE-2026-87428 HIGH 7.8 UPGRADE In Brocade ASCG before 3.5.0, a  local unauthorized user on the ASCG VM who can issue a request to the SANnav
• CVE-2026-87426 MEDIUM 4.3 UPGRADE An unauthenticated network-based attacker can query specific internal management endpoints on Brocade ASCG ver
• CVE-2026-87425 MEDIUM 6.8 UPGRADE An unauthenticated remote attacker can modify the TLS client trust store in Brocade ASCG versions before 3.5.0
• CVE-2026-87424 HIGH 8.8 UPGRADE A vulnerability in the SupportLink API authentication component of Brocade ASCG versions prior to 3.5.0 allows
• CVE-2026-85490 HIGH 8.8 UPGRADE When Brocade ASCG before 3.5.0 processes support bundle archives ingested from remote compromised endpoints, t
• CVE-2026-85489 HIGH 8.8 UPGRADE An authentication flaw exists in the Brocade ASCG administrative management service component
• CVE-2026-85488 HIGH 7.8 UPGRADE Brocade ASCG before 3.5.0 has a well-known Brocade default password embedded in a script distributed to every
• CVE-2026-85487 HIGH 8.8 UPGRADE A path traversal vulnerability exists in the HTTP service component of Brocade ASCG versions before 3.5.0
• CVE-2026-85486 HIGH 8.0 UPGRADE Brocade ASCG before 3.5.0 improperly processes user input by evaluating form data prior to validation
• CVE-2026-85423 HIGH 8.8 UPGRADE A vulnerability has been identified in the data collection service of Brocade ASCG versions before 3.5.0
• CVE-2026-85422 HIGH 7.8 UPGRADE A vulnerability in Brocade ASCG version before 3.5.0 could allow an attacker to obtain a static cryptographic
• CVE-2026-85421 HIGH 8.8 UPGRADE A critical security vulnerability has been identified in Brocade ASCG versions before 3.5.0

FAQ

How do I fix brocade active support connectivity gateway vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is brocade active support connectivity gateway being exploited right now?

None of the tracked brocade active support connectivity gateway CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which brocade active support connectivity gateway CVE should I patch first?

CVE-2026-85490 currently ranks highest (37/100): When Brocade ASCG before 3.5.0 processes support bundle archives ingested from remote compromised endpoints, t.

RSS feed for brocade active support connectivity gateway · ← Back to latest CVEs