CVE-2026-87425: CWE-295: Improper Certificate Validation in Brocade Brocade Active Support Connectivity Gateway

This vulnerability (CWE-295) in Brocade ASCG prior to version 3.5.0 involves improper certificate validation. An unauthenticated attacker can supply unauthorized CA certificates to the management interface, thereby modifying the TLS client trust store. This causes the system to trust certificates that should not be trusted, which could facilitate MITM attacks on communications with managed devices and peer nodes. The CVSS 4.0 score is 7.6, indicating high severity, with attack vector being adjacent network, low attack complexity, no privileges or user interaction required, and high impact on confidentiality and integrity.

Successful exploitation allows an unauthenticated attacker to add unauthorized CA certificates to the trust store, undermining TLS security. This can enable interception and manipulation of encrypted communications between the ASCG and managed switches or peer nodes, potentially leading to data compromise or unauthorized control actions.

No official patch or vendor advisory is provided in the input data. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict access to the management interface to trusted networks and monitor for unauthorized certificate changes if possible.