Skip to content
OpenAdvisories
High · 8.5 CVE-2026-82371 EUVD-2026-86349GHSA-xxcx-x8pw-23q4

Plaintext exposure of sensitive authentication data in SANnav discovery service log files

Published Sep 24, 2026 · Updated Oct 1, 2026 · Assigned by brocade

Description

Plaintext exposure of sensitive authentication data in Brocade SANnav discovery service log files enables individuals with file read access to retrieve administrative switch credentials and active session tokens. An attacker with access to system logs or support bundles can leverage exposed authentication details to compromise managed network infrastructure and access active application sessions. This vulnerability affects Brocade SANnav versions before 3.0.1a.

Affected products

VendorProductAffectedFixed
Brocade SANnav before – < 3.0.1a 3.0.1a

Advisories 1

References