CVE-2026-87428
Received Received - Intake

Local Credential Exposure in Brocade ASCG Before 3.5.0

Publication date: 2026-10-08

Last updated on: 2026-10-08

Assigner: Brocade Communications Systems, LLC

Description
In Brocade ASCG before 3.5.0, a  local unauthorized user on the ASCG VM who can issue a request to the SANnav host network namespace can extract stored management credentials for onboarded SANnav instances and compromise connected Brocade SANnav servers or managed Brocade Fibre Channel switches.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-08
Last Modified
2026-10-08
Generated
2026-10-08
AI Q&A
2026-10-08
EPSS Evaluated
N/A
NVD
CVE-2026-87428
EUVD
EUVD-2026-94798

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
Brocade Brocade Active Support Connectivity Gateway 0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-522 The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability exists in Brocade ASCG versions before 3.5.0. A local unauthorized user on the ASCG VM can send a request to the SANnav host network namespace to extract stored management credentials for onboarded SANnav instances. This allows the attacker to compromise connected Brocade SANnav servers or managed Brocade Fibre Channel switches.

Detection Guidance

This vulnerability affects Brocade ASCG versions before 3.5.0. Detection involves checking the installed ASCG version on the VM. If the version is below 3.5.0, the system is vulnerable. No specific commands are provided in the context to extract credentials, but monitoring network requests to the SANnav host network namespace may help identify unauthorized access attempts.

Impact Analysis

An attacker could gain access to sensitive management credentials, potentially leading to unauthorized control over Brocade SANnav servers or Fibre Channel switches. This could result in data breaches, service disruptions, or unauthorized access to critical infrastructure.

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive data, potentially violating compliance requirements such as GDPR or HIPAA. Organizations may face legal penalties, reputational damage, and loss of trust due to data breaches resulting from this issue.

Mitigation Strategies

Upgrade Brocade ASCG to version 3.5.0 or later to address the vulnerability. Ensure the ASCG VM is properly secured to prevent unauthorized local access to the SANnav host network namespace.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-87428. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart