CVE-2026-0869

Application User custom defined accounts are not properly password protected in Brocade ASCG 3.4.0

State: Published
Severity: 8.3 High
Published: Mar 3, 2026
Updated: Mar 4, 2026
Reserved: Jan 12, 2026

Description

Authentication bypass in Brocade ASCG 3.4.0 Could allow an unauthorized user to perform ASCG operations related to Brocade Support Link(BSL) and streaming configuration. and could even disable the ASCG application or disable use of BSL data collection on Brocade switches within the fabric.

Scores

CVSS	Score	Vector	Source
4.0	8.3 High	CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:L	brocade

Weaknesses

CWE-305 Authentication Bypass by Primary Weakness

Affected Products

Product	Versions
ASCGBrocade	3.4.0Affected

References

https://support.broadcom.com/external/content/SecurityAdvisories/0/37121

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.