CVE-2026-85487: CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Brocade Brocade Active Support Connectivity Gateway
Description
CVE-2026-85487 is a path traversal vulnerability in the HTTP service component of Brocade Active Support Connectivity Gateway (ASCG) versions before 3.5.0. It allows an unauthenticated attacker on the local network to send crafted API requests that bypass path restrictions, enabling arbitrary file read, write, or deletion operations.
CVSS v4.0
Score 8.6high
Affected software
Brocade
Brocade Active Support Connectivity Gateway
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability (CWE-22) affects Brocade ASCG HTTP service prior to version 3.5.0. An attacker without authentication on the local network can exploit the path traversal flaw by manipulating API requests to access or modify files outside the intended directories. This can lead to unauthorized file operations including reading sensitive files, writing malicious files, or deleting critical files.
Potential Impact
Successful exploitation allows an unauthenticated local network attacker to perform arbitrary file read, write, or deletion on the affected system. This can compromise system integrity and confidentiality by exposing sensitive data or disrupting service availability.
Mitigation Recommendations
A fix is available in Brocade ASCG version 3.5.0. Users should upgrade to version 3.5.0 or later to remediate this vulnerability.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- brocade
- Date Reserved
- 2026-09-03T21:31:03.838Z
- Cvss Version
- 4.0
- State
- PUBLISHED
Threat ID: 6ac73cd82cdf04f656f313ef
Added to database: 10/08/2026, 06:48:56 UTC
Last enriched: 10/08/2026, 07:03:32 UTC
Last updated: 10/08/2026, 07:08:13 UTC
Views: 4
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.