CVE-2026-82370 — Unauthenticated remote command injection in the Brocade SANnav orchestrator HTTP service

CVE-2026-82370

Unauthenticated remote command injection in the Brocade SANnav orchestrator HTTP service PUBLISHED

Description (CNA)

Unauthenticated remote command injection in the Brocade SANnav orchestrator HTTP service permits network-adjacent attackers to execute arbitrary administrative switch CLI commands and issue container management instructions. This could allow an attacker to alter Fibre Channel fabric switch configurations or manipulate application container runtimes. This vulnerability affects Brocade SANnav versions before 3.0.1a.

Affected (CNA)

Vendor / product	Versions
Brocade / SANnav	affected 0 before 3.0.1a

CWE

CWE-77

References

https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/38995

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.