What is the CVSS score of CVE-2026-0869?

CVE-2026-0869 has a CVSS 3.1 base score of 8.8 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.1%.

Which versions of Brocade Active Support Connectivity Gateway are affected by CVE-2026-0869?

Brocade Active Support Connectivity Gateway versions up to 3.4.0 contain a critical authentication bypass vulnerability (CVSS 8.8) that allows unauthorized attackers to perform support operations…

How to fix or mitigate CVE-2026-0869?

Within 24 hours: Identify all Brocade ASCG deployments and document current versions; restrict network access to ASCG management interfaces to authorized personnel only; enable detailed logging of all ASCG operations. Within 7 days: Implement network segmentation to isolate ASCG systems; disable the Brocade Support Link feature if operationally feasible; contact Brocade for patch availability and timeline. Within 30 days: Deploy WAF or proxy rules to enforce strict authentication on ASCG API endpoints; conduct forensic review of ASCG access logs for signs of unauthorized activity; develop contingency plan for system isolation if vulnerability is actively exploited.

Brocade Active Support Connectivity Gateway CVE-2026-0869

HIGH

Authentication Bypass by Primary Weakness (CWE-305)

2026-03-03 sirt@brocade.com

Authentication Bypass Broadcom Brocade Active Support Connectivity Gateway

8.8

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

8.8 HIGH

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 22:05 vuln.today

CVE Published

Mar 03, 2026 - 20:16 nvd

HIGH 8.8

DescriptionCVE.org

Authentication bypass in Brocade ASCG 3.4.0 Could allow an unauthorized user to perform ASCG operations related to Brocade Support Link(BSL) and streaming configuration. and could even disable the ASCG application or disable use of BSL data collection on Brocade switches within the fabric.

AnalysisAI

Brocade Active Support Connectivity Gateway versions up to 3.4.0 contains a vulnerability that allows attackers to an unauthorized user to perform ASCG operations related to Brocade Support Link( (CVSS 8.8).

Technical ContextAI

affects Brocade Active Support Connectivity Gateway. Authentication bypass in Brocade ASCG 3.4.0 Could allow an unauthorized user to perform ASCG operations related to Brocade Support Link(BSL) and streaming configuration. and could even disable the ASCG application or disable use of BSL data collection on Brocade switches within the fabric.