CVE-2026-87424: High severity vulnerability
A vulnerability in the SupportLink API authentication component of Brocade ASCG versions prior to 3.5.0 allows an attacker to bypass authentication across deployments due to the use of a hard coded cryptographic key.
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Brocade ASCGto a version that resolves this vulnerability.Fixed in 3.5.0
Event History
Frequently Asked Questions
Which deployments are affected?
Brocade ASCG deployments running versions prior to 3.5.0 are affected. The issue is in the SupportLink API authentication component and is described as affecting deployments broadly.
What access does an attacker need to exploit this issue?
The CVSS vector indicates adjacent-network attack access and low privileges are required. No user interaction or additional attack conditions are required.
What is the remediation?
Upgrade Brocade ASCG to version 3.5.0 or later. The provided data does not identify a workaround for environments that cannot patch immediately.
What could an attacker achieve?
Successful exploitation allows authentication bypass through the SupportLink API. The CVSS metrics indicate high impact to confidentiality, integrity, and availability.