Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2026-87426

An unauthenticated network-based attacker can query specific internal management endpoints on Brocade ASCG versions before 3.5.0 to enumerate the configuration details and state of

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
brocade

Description

An unauthenticated network-based attacker can query specific internal management endpoints on Brocade ASCG versions before 3.5.0 to enumerate the configuration details and state of managed Brocade Fabric OS (FOS) switches. This results in the unauthorized disclosure of the customer's SAN fabric management topology and switch connectivity attributes.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Brocade Brocade Active Support Connectivity Gateway

Default version status: unaffected

  • 0 to < 3.5.0affected

References