Vulnerability · Published Oct 8, 2026 · Assigned by brocade
CVE-2026-85487
High 8.6
In plain English
A high-severity path traversal in Brocade Active Support Connectivity Gateway from Brocade. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 16% of all known vulnerabilities).
Severity (CVSS 4.0)8.6High
Exploit odds (30 days)0.2%top 84.3% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
A path traversal vulnerability exists in the HTTP service component of Brocade ASCG versions before 3.5.0. An unauthenticated attacker on the local network could send a manipulated API request to the service endpoint bypassing path restrictions to arbitrary file read, file write, or file deletion operations.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Brocade | Brocade Active Support Connectivity Gateway | 0 – before 3.5.0 |
Weakness: CWE-22 · Vector: CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N