[ CVE-2026-82368 · Published 23 Sep 2026 ]
Vulnerability in Brocade SANnav
CVSS 8.7
EPSS <1%No fix listed yet
[ Description ]Official description
Insecure access controls on internal service ports in Brocade SANnav versions before 3.0.1a allow local, non-administrative host users to communicate directly with backend management services. A local attacker can leverage this exposed access to transmit commands to connected Fabric OS switches under the security context of the SANnav management user.
[ Fixes ]Fixes and patches
No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.