CVE-2026-87425

Analyzed Analyzed - Analysis Complete

BaseFortify

Publication date: 2026-10-08

Last updated on: 2026-10-14

Assigner: Brocade Communications Systems, LLC

Description

An unauthenticated remote attacker can modify the TLS client trust store in Brocade ASCG versions before 3.5.0. By supplying an unauthorized Certificate Authority (CA) certificate to an unauthenticated management interface, the attacker can cause the system to trust unauthorized certificates, potentially enabling Man-in-the-Middle (MITM) attacks against outbound communications with managed switches and peer nodes.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-08

Last Modified

2026-10-14

Generated

2026-10-19

AI Q&A

2026-10-08

EPSS Evaluated

2026-10-18

NVD

CVE-2026-87425

EUVD

EUVD-2026-94796

Affected Vendors & Products

Vendor	Product	Version / Range
broadcom	brocade_active_support_connectivity_gateway	to 3.5.0 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-295	The product does not validate, or incorrectly validates, a certificate.

Attack-Flow Graph

Executive Summary

This vulnerability allows an unauthenticated remote attacker to modify the TLS client trust store in Brocade ASCG versions before 3.5.0. By providing an unauthorized Certificate Authority (CA) certificate to the unauthenticated management interface, the attacker can make the system trust unauthorized certificates. This could enable Man-in-the-Middle (MITM) attacks on outbound communications with managed switches and peer nodes.

Detection Guidance

To detect this vulnerability, check the Brocade ASCG version on your system. If it is before 3.5.0, the system is vulnerable. Verify the TLS client trust store for unauthorized CA certificates by inspecting the management interface and outbound communications for unexpected certificate authorities.

Impact Analysis

An attacker could intercept, modify, or eavesdrop on sensitive communications between the Brocade ASCG and managed switches or peer nodes. This may lead to data breaches, unauthorized access to network traffic, or manipulation of network operations without detection.

Compliance Impact

This vulnerability could violate compliance requirements by enabling unauthorized access to sensitive data in transit, such as personal or health information. Organizations may fail to meet GDPR's data protection principles or HIPAA's security requirements for encrypted communications.

Mitigation Strategies

Upgrade Brocade ASCG to version 3.5.0 or later to address the trust store modification issue. Ensure the management interface is not exposed to untrusted networks and restrict access to authorized users only.

Hi! I’m here to help you understand CVE-2026-87425. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70