{"id":"CVE-2026-87428","title":"In Brocade ASCG before 3.5.0, a  local unauthorized user on the ASCG VM who can issue a request to the SANnav host network namespace can extract stored management credentials for onboarded SANnav instances and compromise connected Brocad…","summary":"In Brocade ASCG before 3.5.0, a  local unauthorized user on the ASCG VM who can issue a request to the SANnav host network namespace can extract stored management credentials for onboarded SANnav instances and compromise connected Brocad…","severity":"high","cvss":7.8,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-522"],"vendor":"broadcom","product":"brocade_active_support_connectivity_gateway","affected":["brocade_active_support_connectivity_gateway < 3.5.0"],"patched":["brocade_active_support_connectivity_gateway 3.5.0"],"published":"2026-10-08","updated":"2026-10-14","sourceUpdated":"2026-10-14T18:51:50.510","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-87428","references":[{"url":"https://support.broadcom.com/external/content/SecurityAdvisories/0/38390","label":"sirt@brocade.com"}],"tags":["nvd","cve.org"],"epss":0.00098,"epssPercentile":0.00759,"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-10-08T15:14:34.158313Z"},"scores":{"nvd":7.8,"cna":8.4},"ingestedAt":"2026-10-08T09:24:17.779Z","slug":"CVE-2026-87428","body":"## Overview\n\nIn Brocade ASCG before 3.5.0, a  local unauthorized user on the ASCG VM who can issue a request to the SANnav host network namespace can extract stored management credentials for onboarded SANnav instances and compromise connected Brocade SANnav servers or managed Brocade Fibre Channel switches.\n\n## Affected\n\n- `brocade_active_support_connectivity_gateway < 3.5.0`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `brocade_active_support_connectivity_gateway 3.5.0`","depth":"twilight","depthScore":43,"depthScoreParts":{"impact":42.9,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[{"seq":220461,"id":"CVE-2026-87428","ts":1792007497712,"field":"cvss","old":"8.4","new":"7.8"}]}