Skip to content
OpenAdvisories
High · 8.4 CVE-2026-85422 EUVD-2026-94787GHSA-359m-m6w7-5f65

A vulnerability in Brocade ASCG version before 3.5.0 could allow an attacker to obtain a static cryptographic key hardcoded into the softwa…

Published Oct 8, 2026 · Updated Oct 8, 2026 · Assigned by brocade

Description

A vulnerability in Brocade ASCG version before 3.5.0 could allow an attacker to obtain a static cryptographic key hardcoded into the software binaries to secure sensitive data at rest and to protect inter-node communication protocols. An attacker who extracts this key can decrypt stored management credentials or craft forged administrative synchronization messages.

Affected products

VendorProductAffectedFixed
Brocade Brocade Active Support Connectivity Gateway < 3.5.0 3.5.0

References