CVE-2026-85488Published

Brocade ASCG before 3.5.0 has a well-known Brocade default password embedded in a script distributed to every customer. Any local authenticated user with read access to the installation path can discover this credential and perform privileg…

Exact source revision recorded 23 Oct 2026 15:48:27 UTC. It does not establish the source's current position. Latest evidence.

Recorded JSON

cve-program · CVE-2026-85488

Published

Brocade Active Support Connectivity Gateway

Vendor product

Original vendor version evidence · not evaluated as a NuGet range

{
                    "vendor": "Brocade",
                    "product": "Brocade Active Support Connectivity Gateway",
                    "versions": [
                        {
                            "status": "affected",
                            "version": "0",
                            "lessThan": "3.5.0",
                            "versionType": "Brocade ASC-G"
                        }
                    ],
                    "defaultStatus": "unaffected"
                }

Original source record · Cite this exact observation · Complete original publisher JSON