CVE-2026-85487

Name of the Vulnerable Software and Affected Versions Brocade ASCG versions prior to 3.5.0

Description A path traversal issue exists in the HTTP service component. An unauthenticated attacker on the local network can send a manipulated API request to the service endpoint to bypass path restrictions. This allows the attacker to perform arbitrary file read, file write, or file deletion operations. Path traversal is a flaw that allows an attacker to access files and directories that are stored outside the web root folder.

Recommendations Update Brocade ASCG to version 3.5.0 or later.