Arbitrary File Write via Path Traversal during Support Bundle Extraction in Brocade ASCG before 3.5.0 (CVE-2026-85490)
38389
02 October 2026
02 October 2026
CLOSED
HIGH
7.7 - CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
CVE-2026-85490
|
Brocade Security Advisory ID |
BSA-2026-3973 |
|
Component |
ArchivesFiles |
|
|
|
CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Summary
When Brocade ASCG before 3.5.0 processes support bundle archives ingested from remote compromised endpoints, the application fails to sanitize path traversal sequences contained within archive entries prior to extraction. An unauthenticated remote attacker capable of sending or intercepting ingested archive files can leverage this flaw to write arbitrary files to restricted locations on the underlying host, potentially leading to remote code execution.
Products Affected
Brocade ASCG Standard deployment before Brocade ASCG 3.5.0
Solution
A security update is provided in Brocade ASCG 3.5.0
Notes
This is a Frontier AI discovered vulnerability.
Revision History
|
Version |
Change |
Date |
|
1.0 |
Initial Publication |
Sept 09, 2026 |
Disclaimer
THIS DOCUMENT IS PROVIDED ON AN AS-IS BASIS SOLELY FOR INFORMATIONAL PURPOSES AND DOES NOT IMPLY ANY KIND OF GUARANTY OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE. YOUR USE OF THE INFORMATION CONTAINED HEREIN IS AT YOUR OWN RISK. ALL INFORMATION PROVIDED HEREIN IS BASED ON BROCADE'S CURRENT KNOWLEDGE AND UNDERSTANDING OF THE VULNERABILITY AND IMPACT TO BROCADE HARDWARE AND SOFTWARE PRODUCTS. BROCADE RESERVES THE RIGHT TO CHANGE OR UPDATE THIS DOCUMENT AT ANY TIME.