CVE-2026-0869highCWE-305

CVE-2026-0869: high-severity vulnerability in Brocade ASCG

Application User custom defined accounts are not properly password protected in Brocade ASCG 3.4.0

Published · Updated

Follow this CVE+ Monitor ASCG

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 8.3epss 0.4%
Authentication bypass in Brocade ASCG 3.4.0 Could allow an unauthorized user to perform ASCG operations related to Brocade Support Link(BSL) and streaming configuration. and could even disable the ASCG application or disable use of BSL data collection on Brocade switches within the fabric.
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:L
Affected products
Brocade · ASCG
Related CVEs — Brocade ASCG

In the same product, most dangerous first.

CVE-2024-1509HIGHBrocade ASCG 3.2.0 web interface does not enforce HSTS, as defined by RFC 6797 for ports 8030 and 8100EPSS 0.4%