CVE-2026-85490: Path Traversal
When Brocade ASCG before 3.5.0 processes support bundle archives ingested from remote compromised endpoints, the application fails to sanitize path traversal sequences contained within archive entries prior to extraction. An unauthenticated remote attacker capable of sending or intercepting ingested archive files can leverage this flaw to write arbitrary files to restricted locations on the underlying host, potentially leading to remote code execution.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Brocade ASCGto a version that resolves this vulnerability.Fixed in 3.5.0
Event History
Frequently Asked Questions
Which deployments are exposed?
Brocade ASCG deployments before version 3.5.0 are affected when they process support bundle archives ingested from remote compromised endpoints.
Does exploitation require authentication?
No. The vulnerability is described as exploitable by an unauthenticated remote attacker who can send or intercept ingested archive files.
What access or capability does an attacker need?
The attacker must be able to supply a malicious support bundle archive through the ingestion path or intercept an archive being ingested. Crafted path traversal entries can then cause arbitrary file writes to restricted host locations, with potential remote code execution.
What version should be used to remediate the issue?
Upgrade Brocade ASCG to version 3.5.0 or later. Versions before 3.5.0 are identified as affected.