What’s Vulnerable › Vulnerabilities
CVE-2026-82372: Improper handling of sensitive data during IPsec policy creation and modification in Brocade SANnav before 3.0.1.a
- Severity: high (CVSS 8.5 v4.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.2% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2026-09-24 · updated 2026-10-01
- Weakness: CWE-532
Description
Improper handling of sensitive data during IPsec policy creation and modification in Brocade SANnav versions before 3.0.1a results in pre-shared keys being recorded in application logs. Individuals with read access to system log files or support bundles can view these credentials, leading to the potential exposure of keys used to secure network tunnels.
Affected products
- Brocade SANnav: before 3.0.1 — fixed in 3.0.1
How to fix
Upgrade to a fixed version: Brocade SANnav 3.0.1. Check the vendor advisory for mitigations.
References
Get alerted when CVE-2026-82372 or the next vulnerability affects your stack