---
id: CVE-2026-85488
title: >-
  Brocade ASCG before 3.5.0 has a well-known Brocade default password embedded
  in a script distributed to every customer
summary: >-
  Brocade ASCG before 3.5.0 has a well-known Brocade default password embedded
  in a script distributed to every customer. Any local authenticated user with
  read access to the installation path can discover this credential and perform
  privi…
severity: high
cvss: 7.8
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'
cwe:
  - CWE-798
vendor: broadcom
product: brocade_active_support_connectivity_gateway
affected:
  - brocade_active_support_connectivity_gateway < 3.5.0
patched:
  - brocade_active_support_connectivity_gateway 3.5.0
published: '2026-10-08'
updated: '2026-10-14'
sourceUpdated: '2026-10-14T18:49:09.003'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-85488'
references:
  - url: 'https://support.broadcom.com/external/content/SecurityAdvisories/0/38384'
    label: sirt@brocade.com
tags:
  - nvd
  - cve.org
epss: 0.00093
epssPercentile: 0.00546
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: total
  timestamp: '2026-10-08T17:46:15.325437Z'
scores:
  nvd: 7.8
  cna: 7
ingestedAt: '2026-10-08T07:18:54.846Z'
---

## Overview

Brocade ASCG before 3.5.0 has a well-known Brocade default password embedded in a script distributed to every customer. Any local authenticated user with read access to the installation path can discover this credential and perform privilege escalation on affected Open Virtual Appliance (OVA) deployments, where default configuration settings remain in place.

## Affected

- `brocade_active_support_connectivity_gateway < 3.5.0`

## Remediation

Upgrade past the affected range:

- `brocade_active_support_connectivity_gateway 3.5.0`