CVE-2026-85423

Analyzed Analyzed - Analysis Complete

BaseFortify

Publication date: 2026-10-08

Last updated on: 2026-10-14

Assigner: Brocade Communications Systems, LLC

Description

A vulnerability has been identified in the data collection service of Brocade ASCG versions before 3.5.0. An API endpoint within the data collector service fails to perform authentication or authorization checks on incoming requests. An attacker with network access to the service can instruct the application to establish SSH connections to arbitrary hosts and execute arbitrary system commands, effectively turning the appliance into an unauthenticated proxy or execution vector.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-08

Last Modified

2026-10-14

Generated

2026-10-19

AI Q&A

2026-10-08

EPSS Evaluated

2026-10-18

NVD

CVE-2026-85423

EUVD

EUVD-2026-94788

Affected Vendors & Products

Vendor	Product	Version / Range
broadcom	brocade_active_support_connectivity_gateway	to 3.5.0 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-306	The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.

Attack-Flow Graph

Executive Summary

This vulnerability exists in Brocade ASCG versions before 3.5.0. The data collection service has an API endpoint that lacks authentication or authorization checks. Attackers with network access can exploit this to make the appliance establish SSH connections to any host and run arbitrary system commands. This turns the device into an unauthenticated proxy or execution tool.

Detection Guidance

Detecting this vulnerability requires checking for unauthenticated API access to the Brocade ASCG data collector service. Inspect network traffic for connections to the vulnerable API endpoint on port 443 or 80. Look for SSH connection attempts initiated by the appliance to arbitrary hosts. Check logs for unusual command execution patterns from the data collector service.

Impact Analysis

An attacker could use this flaw to execute malicious commands on your system through the vulnerable Brocade ASCG appliance. This may lead to unauthorized access, data theft, or further compromise of connected systems. The appliance could also be used to launch attacks on other hosts in your network.

Compliance Impact

This vulnerability could lead to unauthorized data access or exfiltration, violating GDPR's data protection requirements and HIPAA's security rules. Organizations may face compliance violations, fines, or legal consequences if this flaw is exploited to compromise sensitive data.

Mitigation Strategies

Immediately upgrade Brocade ASCG to version 3.5.0 or later. Block external network access to the data collector service API endpoint. Disable unnecessary SSH outbound connections from the appliance. Review and restrict network egress rules for the Brocade ASCG device.

Hi! I’m here to help you understand CVE-2026-85423. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70