What’s Vulnerable › Vulnerabilities
CVE-2026-82371: Plaintext exposure of sensitive authentication data in SANnav discovery service log files
- Severity: high (CVSS 8.5 v4.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.1% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2026-09-24 · updated 2026-10-01
- Weakness: CWE-532
Description
Plaintext exposure of sensitive authentication data in Brocade SANnav discovery service log files enables individuals with file read access to retrieve administrative switch credentials and active session tokens. An attacker with access to system logs or support bundles can leverage exposed authentication details to compromise managed network infrastructure and access active application sessions. This vulnerability affects Brocade SANnav versions before 3.0.1a.
Affected products
- Brocade SANnav: from before before 3.0.1a — fixed in 3.0.1a
How to fix
Upgrade to a fixed version: Brocade SANnav 3.0.1a. Check the vendor advisory for mitigations.
References
Get alerted when CVE-2026-82371 or the next vulnerability affects your stack