What’s Vulnerable › Products
Brocade SANnav vulnerabilities
67 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 26 published in the last 12 months.
Check whether your Brocade SANnav version is affected
Latest Brocade SANnav vulnerabilities
- CVE-2026-5769 — (CVSS 4.1)
- CVE-2026-5049 — (CVSS 5.7)
- CVE-2026-5048 — (CVSS 8.0)
- CVE-2026-5047 — (CVSS 5.7)
- CVE-2026-85417 — Incomplete property masking in the SANnav logging subsystem (CVSS 6.4)
- CVE-2026-14443 — Incomplete log sanitization during bulk IPsec policy collection in Brocade SANnav before 3.0.1a (CVSS 8.4)
- CVE-2026-14442 — Information exposure vulnerability in the job scheduling component of SANnav before 3.0.1a (CVSS 6.9)
- CVE-2026-14441 — Logic flaw in SANnav Java cache key handling object comparison handling (CVSS 6.9)
- CVE-2026-82372 — Improper handling of sensitive data during IPsec policy creation and modification in Brocade SANnav before 3.0.1.a (CVSS 8.5)
- CVE-2026-82371 — Plaintext exposure of sensitive authentication data in SANnav discovery service log files (CVSS 8.5)
- CVE-2026-82370 — Unauthenticated remote command injection in the Brocade SANnav orchestrator HTTP service (CVSS 8.6)
- CVE-2026-82369 — Insufficient input sanitization of shell metacharacters in Brocade SANnav before 3.0.1a (CVSS 8.6)
- CVE-2026-82368 — (CVSS 8.7)
- CVE-2025-6392 — Daily Data Dump Collector logs database password in cleartext when running docker exec commands (CVE-2025-6392) (CVSS 4.4)
- CVE-2025-6390 — Cleartext storage of sensitive information in Brocade SANnav server audit logs. (CVSS 4.4)
- CVE-2025-4662 — Plaintext security passwords are logged in the audit logs while executing openssl cmd (CVSS 4.4)
- CVE-2024-4282 — Weak TLS Ciphers on Brocade SANnav OVA SSH port 22 (CVSS 9.8)
- CVE-2024-10405 — Weak TLS Ciphers on Brocade SANnav port 443 & 18082 (CVSS 5.3)
- CVE-2024-2240 — Docker implementation in Brocade SANnav is missing Audit Rules. (CVSS 7.2)
- CVE-2025-1053 — Brocade SANnav encryption key is logged in the debug logs (CVSS 4.9)
- CVE-2024-10404 — Clear text password seen in switch-asset-collectors-mw in Brocade SANnav supportsave (CVSS 4.4)
- CVE-2022-43937 — Brocade SANnav Information Disclosure Vulnerability (CVSS 5.5)
- CVE-2022-43936 — Brocade Fabric OS switch passwords when debugging is enabled (CVSS 4.9)
- CVE-2022-43935 — Switch passwords and authorization IDs are printed in the embedded MLS DB file (CVSS 4.4)
- CVE-2022-43934 — Weak Key-exchange algorithms (CVSS 7.5)