OCTOBER 17, 2026
Live Feed
Back to database
Case File

CVE-2026-85489

HIGH · CVSS 8.8 EPSS 0.21%

Source: NVD + CISA KEV + EPSS · Published 2026-10-08 · Last synced 2026-10-17

CyberRota Analysis

AI-Generated

An authentication flaw in the Brocade ASCG administrative management service allows unauthenticated network users to send direct API requests, enabling them to perform privileged actions such as accessing sensitive configuration data and modifying device inventories. This high-severity vulnerability impacts all versions prior to 3.5.0 and should be prioritized by organizations using Brocade ASCG to prevent unauthorized access and potential system compromise.

CVE
CVE-2026-85489
Severity
HIGH
CVSS
8.8
EPSS
0.21%

Original NVD Description

An authentication flaw exists in the Brocade ASCG administrative management service component. An unauthenticated network user can issue direct API requests to perform privileged actions, including accessing sensitive system configuration mapping data, modifying managed device inventories, and altering operational settings. This vulnerability affects all versions of Brocade ASCG before 3.5.0.

Related CVEs

Other vulnerabilities affecting the same vendor(s)