Vulnerability Details CVE-2026-87428
In Brocade ASCG before 3.5.0, a local unauthorized user on the ASCG VM who can issue a request to the SANnav host network namespace can extract stored management credentials for onboarded SANnav instances and compromise connected Brocade SANnav servers or managed Brocade Fibre Channel switches.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 0.6%
CVSS Severity
CVSS v3 Score 7.8
Products affected by CVE-2026-87428
-
cpe:2.3:a:broadcom:brocade_active_support_connectivity_gateway:1.0.0
-
cpe:2.3:a:broadcom:brocade_active_support_connectivity_gateway:1.1.0
-
cpe:2.3:a:broadcom:brocade_active_support_connectivity_gateway:1.2.0
-
cpe:2.3:a:broadcom:brocade_active_support_connectivity_gateway:1.3.0
-
cpe:2.3:a:broadcom:brocade_active_support_connectivity_gateway:1.3.0a
-
cpe:2.3:a:broadcom:brocade_active_support_connectivity_gateway:2.0.0
-
cpe:2.3:a:broadcom:brocade_active_support_connectivity_gateway:2.1.0a
-
cpe:2.3:a:broadcom:brocade_active_support_connectivity_gateway:2.1.1_01
-
cpe:2.3:a:broadcom:brocade_active_support_connectivity_gateway:3.0.0
-
cpe:2.3:a:broadcom:brocade_active_support_connectivity_gateway:3.0.0a
-
cpe:2.3:a:broadcom:brocade_active_support_connectivity_gateway:3.1.0
-
cpe:2.3:a:broadcom:brocade_active_support_connectivity_gateway:3.2.0
-
cpe:2.3:a:broadcom:brocade_active_support_connectivity_gateway:3.3.0
-
cpe:2.3:a:broadcom:brocade_active_support_connectivity_gateway:3.3.0a
-
cpe:2.3:a:broadcom:brocade_active_support_connectivity_gateway:3.4.0