{"id":"CVE-2026-85490","url":"https://www.cyber-defence.io/tools/cve/CVE-2026-85490","generatedAt":"2026-10-27T23:56:48.333Z","title":"When Brocade ASCG before 3.5.0 processes support bundle archives ingested from remote compromised endpoints, the application fails to sanitize path traversal sequences contained within archive entries prior to extraction.","description":"When Brocade ASCG before 3.5.0 processes support bundle archives ingested from remote compromised endpoints, the application fails to sanitize path traversal sequences contained within archive entries prior to extraction. An unauthenticated remote attacker capable of sending or intercepting ingested archive files can leverage this flaw to write arbitrary files to restricted locations on the underlying host, potentially leading to remote code execution.","published":"2026-10-08T07:16:33.000Z","lastModified":"2026-10-14T18:49:56.000Z","status":"Analyzed","sourceIdentifier":"sirt@brocade.com","cvss":{"version":"4.0","score":7.7,"severity":"HIGH","vector":"CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/M"},"cwe":["CWE-22"],"affected":["broadcom/brocade active support connectivity gateway"],"epss":{"score":0.00314,"percentile":0.24095,"date":"2026-10-26","history":[{"date":"2026-10-08","score":0.00273,"percentile":0.18014}]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"high","text":"High impact if exploited, but EPSS currently rates exploitation as unlikely (0.31%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit."},"changes":[{"kind":"new","label":"New CVE","at":"2026-10-08T07:16:33.000Z","detail":{"score":"7.7","severity":"HIGH","publishedAt":"2026-10-08T07:16:32.860Z"},"summary":"New CVE, high severity (CVSS 7.7)."}],"references":[{"url":"https://support.broadcom.com/external/content/SecurityAdvisories/0/38389","tags":["Vendor Advisory"],"source":"sirt@brocade.com"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2026-85490","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}