7.7
Élevée
CVE-2026-85490 When Brocade ASCG before 3.5.0 processes support bundle archives ingested from remote compromised endpoints, the…
Description
When Brocade ASCG before 3.5.0 processes support bundle archives ingested from remote compromised endpoints, the application fails to sanitize path traversal sequences contained within archive entries prior to extraction. An unauthenticated remote attacker capable of sending or intercepting ingested archive files can leverage this flaw to write arbitrary files to restricted locations on the underlying host, potentially leading to remote code execution.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Brocade Active Support Connectivity Gateway 3.5 | premières → < 3.5.0 | 3.5.0 |
Autres CVE de Brocade Active Support Connectivity Gateway
Les 13 CVE de Brocade Active Support Connectivity Gateway →
CVE-2026-87428
In Brocade ASCG before 3.5.0, a local unauthorized user on the ASCG VM who can issue a request to the SANnav host…
8.4
Élevée
CVE-2026-87426
An unauthenticated network-based attacker can query specific internal management endpoints on Brocade ASCG versions…
5.3
Moyenne
CVE-2026-87425
An unauthenticated remote attacker can modify the TLS client trust store in Brocade ASCG versions before 3.5.0
7.6
Élevée
CVE-2026-87424
A vulnerability in the SupportLink API authentication component of Brocade ASCG versions prior to 3.5.0 allows an…
8.6
Élevée