CVE-2026-87428

In Brocade ASCG before 3.5.0, a  local unauthorized user on the ASCG VM who can issue a request to the SANnav host network namespace can extract stored management credentials for onboarded SANnav instances and compromise connected Brocade SANnav servers or managed Brocade Fibre Channel switches.

Score

CVSS 4.0 8.4 High

Status

Analyzed - sirt@brocade.com

Published

2026-10-08

Last modified

2026-10-14

Weaknesses

CWE-522

Affected products

• Brocade Active Support Connectivity Gateway (Broadcom)
• Brocade Active Support Connectivity Gateway (Brocade)

References

• https://support.broadcom.com/external/content/SecurityAdvisories/0/38390