Incomplete property masking in the SANnav logging subsystem permits SNMP authentication and privacy passwords to be recorded in application logs under specific configuration conditions. Individuals with read access to system logs or support bundles can retrieve these credentials, leading to unauthorized read or management access to monitored switch environments
A logic flaw in Java cache key handling object comparison handling could lead to improper identifier resolution when processing specific user account structures. The issue has been remediated by updating the internal comparison routines to ensure accurate object evaluation and prevent potential identity mismatch conditions.
An information exposure vulnerability in the job scheduling component of SANnav allows sensitive credentials to be written to application logs in plain text. When scheduled support save jobs or related operational tasks are executed, sensitive parameters including external server passwords and archive protection keys are logged without proper masking. A local or authenticated user with access to application logs or support bundles can view these cleartext credentials, potentially leading to unauthorized access to remote backup targets or protected archives.
Incomplete log sanitization during bulk IPsec policy collection in Brocade SANnav versions before 3.0.1a permit extension switch pre-shared keys to be written to system logs. Individuals with read access to container logs or support archives can obtain these keys, leading to the potential compromise of encrypted network tunnels.
Improper handling of sensitive data during IPsec policy creation and modification in Brocade SANnav versions before 3.0.1a results in pre-shared keys being recorded in application logs. Individuals with read access to system log files or support bundles can view these credentials, leading to the potential exposure of keys used to secure network tunnels.
CVE-2026-82371 is a vulnerability in Brocade SANnav discovery service where sensitive authentication data is logged in plaintext. This allows individuals with read access to log files to retrieve administrative credentials and active session tokens. The flaw affects Brocade SANnav versions prior to 3.0.1a. Exploiting this vulnerability could lead to compromise of managed network infrastructure and unauthorized access to active application sessions.
CVE-2026-82370 is a high-severity unauthenticated remote command injection vulnerability in the Brocade SANnav orchestrator HTTP service. It allows network-adjacent attackers to execute arbitrary administrative switch CLI commands and container management instructions. This could lead to unauthorized changes to Fibre Channel fabric switch configurations and manipulation of application container runtimes. The vulnerability affects Brocade SANnav versions before 3.0.1a.
CVE-2026-82369 is an OS command injection vulnerability in Brocade SANnav's CLI scripting component. It allows authenticated users with command execution permissions to bypass command allow-lists and execute unauthorized shell commands on managed fabric switches. This can lead to full administrative access to the switches. The vulnerability affects all Brocade SANnav versions prior to 3.0.1a.
CVE-2026-82368 is a high-severity vulnerability in Brocade SANnav prior to version 3.0.1a. It involves improper access control on internal service ports, allowing local, non-administrative users to communicate directly with backend management services. This exposure enables an attacker with local access to send commands to connected Fabric OS switches using the SANnav management user's privileges.
Authentication bypass in Brocade ASCG 3.4.0 Could allow an unauthorized user to perform ASCG operations related to Brocade Support Link(BSL) and streaming configuration.and could even disable the ASCG application or disable use of BSL data collection on Brocade switches within the fabric.
A
vulnerability in Brocade Fabric OS before 9.2.1c2 could allow an
authenticated attacker with admin privileges using the shell commands
“source, ping6, sleep, disown, wait to modify the path variables and
move upwards in the directory structure or to traverse to different
directories.
A vulnerability in Brocade Fabric OS before 9.2.1c3 could allow elevating the privileges of the local authenticated user to “root” using the export option of seccertmgmt and seccryptocfg commands.
CVE-2025-58380 is a medium severity path traversal vulnerability in Brocade Fabric OS versions before 9.2.1. It allows an authenticated attacker with administrative privileges to exploit the shell command 'grep' to manipulate path variables and traverse directories outside intended boundaries. This vulnerability requires high privileges and no user interaction, limiting its exploitation scope. Although no known exploits are reported in the wild, successful exploitation could lead to unauthorized access or modification of sensitive files within the system. European organizations using Brocade Fabric OS in their storage area networks (SANs) could face risks to data confidentiality and integrity. Mitigation involves upgrading to Fabric OS 9.2.1 or later and restricting administrative shell access.
A vulnerability in Brocade Fabric OS could allow an authenticated, local attacker with privileges to access the Bash shell to access insecurely stored file contents including the history command.
CVE-2025-58379 is a medium-severity vulnerability in Brocade Fabric OS versions prior to 9.2.1 that allows a local authenticated attacker with low privileges to execute commands exposing higher privilege command line passwords. This flaw arises from execution with unnecessary privileges (CWE-250), enabling privilege leakage without requiring network access or elevated authentication. Exploitation requires user interaction and local access but can lead to significant confidentiality breaches within storage network environments. No known exploits are currently reported in the wild. European organizations using Brocade Fabric OS in their SAN infrastructure could face risks of credential exposure, potentially leading to further lateral movement or unauthorized access. Mitigation involves upgrading to Fabric OS 9.2.1 or later and restricting local user access to management interfaces.
A vulnerability in Brocade Fabric OS versions before 9.2.1c2 could allow an administrator-level user to execute the bind command, to escalate privileges and bypass security controls allowing the execution of arbitrary commands.
A vulnerability in the secure configuration of authentication and
management services in Brocade Fabric OS before Fabric OS 9.2.1c2 could
allow an authenticated, remote attacker with administrative credentials
to execute arbitrary commands as root using “supportsave”,
“seccertmgmt”, “configupload” command.
CVE-2025-12774 is a medium severity vulnerability in Brocade SANnav versions before 3.0 involving cleartext storage of sensitive information within the SANnav support save file. The issue arises from a migration script that collects database SQL queries and stores them in the support save file, which can be accessed by an attacker with file access. This exposure could reveal sensitive details such as database table structures and encrypted passwords. Exploitation requires local access to the support save file and high privileges on the system, with no user interaction needed. While no known exploits are currently reported in the wild, the vulnerability poses a risk to confidentiality if the support save file is improperly handled or accessed by unauthorized users. European organizations using Brocade SANnav for storage area network management should be aware of this risk and implement strict access controls and update to version 3.0 or later when available.
CVE-2025-12773 is a high-severity vulnerability in Brocade SANnav versions before 2.4.0a, where the update-reports-purge-settings.sh script improperly logs sensitive information, specifically the SANnav database password, into system audit logs. This flaw allows a remote authenticated attacker with access to these logs to retrieve the database password, potentially compromising the confidentiality and integrity of the SANnav environment. Exploitation requires authenticated access and some user interaction but can lead to significant impact due to exposure of critical credentials. No known exploits are currently reported in the wild. European organizations using Brocade SANnav for storage area network management should prioritize patching or mitigating this vulnerability to prevent unauthorized access to sensitive infrastructure components.
Brocade SANnav before 2.4.0b logs the Brocade Fabric OS Switch admin password on the SANnav support save logs.
When OOM occurs on a Brocade SANnav server, the call stack trace for the Brocade switch is also collected in the heap dump file which contains this switch password in clear text. The vulnerability could allow a remote authenticated attacker with admin privilege able to access the SANnav logs or the supportsave to read the switch admin password.