CVE-2026-87428

Analyzed Analyzed - Analysis Complete

BaseFortify

Publication date: 2026-10-08

Last updated on: 2026-10-14

Assigner: Brocade Communications Systems, LLC

Description

In Brocade ASCG before 3.5.0, a local unauthorized user on the ASCG VM who can issue a request to the SANnav host network namespace can extract stored management credentials for onboarded SANnav instances and compromise connected Brocade SANnav servers or managed Brocade Fibre Channel switches.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-08

Last Modified

2026-10-14

Generated

2026-10-19

AI Q&A

2026-10-08

EPSS Evaluated

2026-10-18

NVD

CVE-2026-87428

EUVD

EUVD-2026-94798

Affected Vendors & Products

Vendor	Product	Version / Range
broadcom	brocade_active_support_connectivity_gateway	to 3.5.0 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-522	The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.

Attack-Flow Graph

Executive Summary

This vulnerability exists in Brocade ASCG versions before 3.5.0. A local unauthorized user on the ASCG VM can send a request to the SANnav host network namespace to extract stored management credentials for onboarded SANnav instances. This allows the attacker to compromise connected Brocade SANnav servers or managed Brocade Fibre Channel switches.

Detection Guidance

This vulnerability affects Brocade ASCG versions before 3.5.0. Detection involves checking the installed ASCG version on the VM. If the version is below 3.5.0, the system is vulnerable. No specific commands are provided in the context to extract credentials, but monitoring network requests to the SANnav host network namespace may help identify unauthorized access attempts.

Impact Analysis

An attacker could gain access to sensitive management credentials, potentially leading to unauthorized control over Brocade SANnav servers or Fibre Channel switches. This could result in data breaches, service disruptions, or unauthorized access to critical infrastructure.

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive data, potentially violating compliance requirements such as GDPR or HIPAA. Organizations may face legal penalties, reputational damage, and loss of trust due to data breaches resulting from this issue.

Mitigation Strategies

Upgrade Brocade ASCG to version 3.5.0 or later to address the vulnerability. Ensure the ASCG VM is properly secured to prevent unauthorized local access to the SANnav host network namespace.

Hi! I’m here to help you understand CVE-2026-87428. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70