Skip to content
OpenAdvisories
High · 8.6 CVE-2026-87424 EUVD-2026-94795GHSA-3fcc-27mp-9h8c

A vulnerability in the SupportLink API authentication component of Brocade ASCG versions prior to 3.5.0 allows an attacker to bypass authen…

Published Oct 8, 2026 · Updated Oct 8, 2026 · Assigned by brocade

Description

A vulnerability in the SupportLink API authentication component of Brocade ASCG versions prior to 3.5.0 allows an attacker to bypass authentication across deployments due to the use of a hard coded cryptographic key.

Affected products

VendorProductAffectedFixed
Brocade Brocade Active Support Connectivity Gateway < 3.5.0 3.5.0

References