CVE-2026-0869CWE-305

Application User custom defined accounts are not properly password protected in Brocade ASCG 3.4.0

High · published March 3, 2026

CVSS v4.0
8.3
EPSS
0%
Percentile
34.5
In the wild
Unconfirmed
What it is

Authentication bypass in Brocade ASCG 3.4.0 Could allow an unauthorized user to perform ASCG operations related to Brocade Support Link(BSL) and streaming configuration. and could even disable the ASCG application or disable use of BSL data collection on Brocade switches within the fabric.

The record
Technical detail
CVSS v4.0
8.3 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:L
EPSS
0.00413 · 34.5th percentile
Weakness
CWE-305 · Authentication Bypass by Primary Weakness
Published
2026-03-03T19:59Z
EPSS history
Timeline
  • 03 MAR 19:59Z
    Application User custom defined accounts are not properly password protected in Brocade ASCG 3.4.0
    cvelistv5