This vulnerability (CVE-2026-82371) involves the insertion of sensitive authentication information into log files by the Brocade SANnav discovery service. Because the sensitive data, including administrative switch credentials and active session tokens, is stored in plaintext within log files, any user with file read access can extract these credentials. This can lead to unauthorized access to network infrastructure and active sessions. The flaw affects versions of Brocade SANnav before 3.0.1a. No explicit patch or remediation details are provided in the input data.

The vulnerability allows attackers with access to system logs or support bundles to obtain administrative credentials and session tokens, potentially leading to full compromise of managed network infrastructure and unauthorized access to active application sessions. This elevates the risk of unauthorized control and data exposure within affected environments.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to system logs and support bundles to trusted personnel only to reduce the risk of credential exposure.