CVE-2026-85486: Brocade Active Support Connectivity Gateway

High severity, CVSS 8.6. EPSS: 0.2% chance of exploitation in the next 30 days.

Brocade ASCG before 3.5.0 improperly processes user input by evaluating form data prior to validation. When an authenticated user submits a configuration form, the submitted text could immediately be processed. A malicious actor with basic access can supply crafted input to execute arbitrary code on the server and take control of the application.

Affected products

• Brocade Brocade Active Support Connectivity Gateway: before 3.5.0 (fixed in 3.5.0)

Published 2026-10-08. Last modified 2026-10-08.