CVE-2026-0869

CWE-3053 documents3 sources

Severity

8.3HIGH

EPSS

0.1%

top 78.21%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Brocade Ascg Broadcom Brocade Active Support Connectivity Gateway

Timeline

PublishedMar 3

Description

Authentication bypass in Brocade ASCG 3.4.0 Could allow an unauthorized user to perform ASCG operations related to Brocade Support Link(BSL) and streaming configuration. and could even disable the ASCG application or disable use of BSL data collection on Brocade switches within the fabric.

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:L

Affected Packages2 packages

▶CVEListV5brocade/ascg3.4.0

▶NVDbroadcom/brocade_active_support_connectivity_gateway3.4.0

🔴Vulnerability Details

GHSA

GHSA-hg48-698q-829j: Authentication bypass in Brocade ASCG 3↗2026-03-03

▶

CVEList

Application User custom defined accounts are not properly password protected in Brocade ASCG 3.4.0↗2026-03-03

▶