CVE-2026-85490

Name of the Vulnerable Software and Affected Versions Brocade ASCG versions prior to 3.5.0

Description The application fails to sanitize path traversal sequences within support bundle archives ingested from remote compromised endpoints before extraction. An unauthenticated remote attacker who can send or intercept these archive files can write arbitrary files to restricted locations on the host, which may lead to remote code execution. Path traversal is a technique used to access files and directories that are stored outside the web root folder by manipulating variables such as file paths.

Recommendations Update Brocade ASCG to version 3.5.0 or later.