OCTOBER 17, 2026
Live Feed
Back to database
Case File

CVE-2026-87428

HIGH · CVSS 7.8 EPSS 0.10%

Source: NVD + CISA KEV + EPSS · Published 2026-10-08 · Last synced 2026-10-17

CyberRota Analysis

AI-Generated

Brocade ASCG versions prior to 3.5.0 are vulnerable to local unauthorized access, allowing attackers to extract management credentials for SANnav instances. This exploitation can lead to the compromise of connected Brocade SANnav servers and managed Brocade Fibre Channel switches, posing a significant risk to network security. Organizations utilizing Brocade ASCG should prioritize patching to mitigate potential unauthorized access and credential theft.

CVE
CVE-2026-87428
Severity
HIGH
CVSS
7.8
EPSS
0.10%

Original NVD Description

In Brocade ASCG before 3.5.0, a  local unauthorized user on the ASCG VM who can issue a request to the SANnav host network namespace can extract stored management credentials for onboarded SANnav instances and compromise connected Brocade SANnav servers or managed Brocade Fibre Channel switches.

Related CVEs

Other vulnerabilities affecting the same vendor(s)