{"id":"CVE-2026-85486","published":"2026-10-08T07:16:32.317","lastModified":"2026-10-08T20:08:45.857","description":"Brocade ASCG before 3.5.0 improperly processes user input by evaluating form data prior to validation. When an authenticated user submits a configuration form, the submitted text could immediately be processed. A malicious actor with basic access can supply crafted input to execute arbitrary code on the server and take control of the application.","cvssScore":null,"cvssSeverity":null,"cvssVector":null,"cwes":["CWE-95"],"vendors":[],"products":[],"references":[{"url":"https://support.broadcom.com/external/content/SecurityAdvisories/0/38381","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}