Description
An unauthenticated remote attacker can modify the TLS client trust store in Brocade ASCG versions before 3.5.0. By supplying an unauthorized Certificate Authority (CA) certificate to an unauthenticated management interface, the attacker can cause the system to trust unauthorized certificates, potentially enabling Man-in-the-Middle (MITM) attacks against outbound communications with managed switches and peer nodes.
Published: 2026-10-08
Score: 7.6 High
EPSS: < 1% Very Low
KEV: No
Impact: Remote Man‑in‑the‑Middle via compromised trust store
Action: Immediate Patch
AI Analysis

Impact

An unauthenticated attacker can inject an unauthorized Certificate Authority certificate into the TLS client trust store of Brocade Active Support Connectivity Gateway before version 3.5.0. This alteration makes the gateway trust certificates it should not, allowing the attacker to intercept or alter outbound traffic to managed switches and peer nodes. The vulnerability is a direct flaw in certificate validation (CWE‑295) and permits manipulation of cryptographic trust mechanisms.

Affected Systems

The affected product is Brocade Active Support Connectivity Gateway. All running versions prior to 3.5.0 are vulnerable; no specific sub‑versions are listed.

Risk and Exploitability

The CVSS score of 7.6 indicates a high severity impact, but the EPSS score is currently unavailable, implying no known exploitation data. The vulnerability is not listed in CISA KEV, suggesting it is not a widely known exploited flaw yet. The attack requires no authentication to the management interface and can be performed over an unauthenticated network session, so the attack vector is likely remote via the exposed management port. This makes mitigation urgent for any reachable instance.

Generated by OpenCVE AI on October 8, 2026 at 08:21 UTC.

Remediation

Vendor Solution

Security update provided in Brocade ASCG 3.5.0

OpenCVE Recommended Actions

  • Apply the Brocade ASCG security update to version 3.5.0 or later
  • If the update is not immediately available, disable unauthorized inbound connections to the management interface and monitor for anomalous certificate activity
  • Ensure the trust store contains only legitimate CA certificates and regularly audit certificate files for unexpected changes

Generated by OpenCVE AI on October 8, 2026 at 08:21 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Wed, 14 Oct 2026 19:00:00 +0000

Type Values Removed Values Added
CPEs cpe:2.3:a:broadcom:brocade_active_support_connectivity_gateway:*:*:*:*:*:*:*:*
Metrics cvssV3_1

{'score': 6.8, 'vector': 'CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N'}

Fri, 09 Oct 2026 07:30:00 +0000

Type Values Removed Values Added
First Time appeared Broadcom
Broadcom brocade Active Support Connectivity Gateway
Vendors & Products Broadcom
Broadcom brocade Active Support Connectivity Gateway

Thu, 08 Oct 2026 20:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Thu, 08 Oct 2026 08:45:00 +0000

Type Values Removed Values Added
Title TLS Client Trust Store Modification Enabling MITM

Thu, 08 Oct 2026 07:15:00 +0000

Type Values Removed Values Added
Description An unauthenticated remote attacker can modify the TLS client trust store in Brocade ASCG versions before 3.5.0. By supplying an unauthorized Certificate Authority (CA) certificate to an unauthenticated management interface, the attacker can cause the system to trust unauthorized certificates, potentially enabling Man-in-the-Middle (MITM) attacks against outbound communications with managed switches and peer nodes.
Weaknesses CWE-295
References
Metrics cvssV4_0

{'score': 7.6, 'vector': 'CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N'}

Subscriptions

Broadcom Brocade Active Support Connectivity Gateway
cve-icon MITRE

Status: PUBLISHED

Assigner: brocade

Published:

Updated: 2026-10-08T17:54:41.741Z

Reserved: 2026-09-08T21:56:45.681Z

Link: CVE-2026-87425

cve-icon Vulnrichment

Updated: 2026-10-08T15:14:38.489Z

cve-icon NVD

Status : Analyzed

Published: 2026-10-08T07:16:33.140

Modified: 2026-10-14T18:50:35.923

Link: CVE-2026-87425

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-09T07:15:09Z

Weaknesses
  • CWE-295

    Improper Certificate Validation