What’s Vulnerable › Vulnerabilities
CVE-2026-14443: Incomplete log sanitization during bulk IPsec policy collection in Brocade SANnav before 3.0.1a
- Severity: high (CVSS 8.4 v4.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.1% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2026-09-24 · updated 2026-10-01
- Weakness: CWE-532
Description
Incomplete log sanitization during bulk IPsec policy collection in Brocade SANnav versions before 3.0.1a permit extension switch pre-shared keys to be written to system logs. Individuals with read access to container logs or support archives can obtain these keys, leading to the potential compromise of encrypted network tunnels.
Affected products
- Brocade SANnav: before 3.0.1.a — fixed in 3.0.1.a
How to fix
Upgrade to a fixed version: Brocade SANnav 3.0.1.a. Check the vendor advisory for mitigations.
References
Get alerted when CVE-2026-14443 or the next vulnerability affects your stack