The vulnerability identified as CVE-2026-85417 in Brocade SANnav involves incomplete property masking in the SANnav logging subsystem. This flaw permits SNMP authentication and privacy passwords to be recorded in application logs when certain configurations are in place. As a result, anyone with read access to system logs or support bundles can extract these credentials, potentially gaining unauthorized read or management access to the monitored switch environments. The CVSS 4.0 vector indicates the attack requires adjacent network access with low complexity and low privileges but no user interaction, and the impact is limited to confidentiality with high scope and integrity and availability unaffected.

Sensitive SNMP credentials may be exposed in application logs, which can be accessed by individuals with read permissions to system logs or support bundles. This exposure can lead to unauthorized read or management access to Brocade SAN switches monitored by SANnav, potentially compromising network management security.

No patch or official fix information is provided in the available data. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict access to system logs and support bundles to trusted personnel only and review logging configurations to minimize exposure of sensitive information.