CVE-2026-82368

Brocade / SANnav PUBLISHED

Description (CNA)

Insecure access controls on internal service ports in Brocade SANnav versions before 3.0.1a allow local, non-administrative host users to communicate directly with backend management services. A local attacker can leverage this exposed access to transmit commands to connected Fabric OS switches under the security context of the SANnav management user.

Affected (CNA)

Vendor / product	Versions
Brocade / SANnav	affected 0 before 3.0.1a

CWE

CWE-284

References

https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/38993

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.