CVE-2026-85486
Brocade ASCG before 3.5.0 improperly processes user input by evaluating form data prior to validation. When an authenticated user submits a configuration form, the submitted tex…
Published: 2026-10-08 · CVSS: 8.6 · CVSS 4.0
Brocade ASCG before 3.5.0 improperly processes user input by evaluating form data prior to validation. When an authenticated user submits a configuration form, the submitted text could immediately be processed. A malicious actor with basic access can supply crafted input to execute arbitrary code on the server and take control of the application.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7