Veille CVE

Recherche « Broadcom brocade sannav »

5 CVE

  1. CVE-2026-87428 7.8 Élevée

    Brocade Active Support Connectivity Gateway · Broadcom brocade active support connectivity gateway

    In Brocade ASCG before 3.5.0, a  local unauthorized user on the ASCG VM who can issue a request to the SANnav host network namespace can extract stored management credentials for onboarded SANnav instances and compromise connected Brocade SANnav servers or managed Brocade Fibre Channel switches.

  2. CVE-2026-5769 4.1 Moyenne

    Brocade SANnav · Broadcom brocade sannav

    A vulnerability in Brocade SANnav before 3.0.1 can have the Brocade Fabric OS switch admin password captured in plaintext within a memory swap file on the server hosting the Brocade SANnav Virtual Machine (VM). This can happen when the SANnav server encounters an Out Of Memory (OOM) condition. The vulnerability could allow an authenticated admin user with access to the server hosting the SANnav to potentially view the memory swap file and access the password(s).

  3. CVE-2026-5049 5.7 Moyenne

    Brocade SANnav · Broadcom brocade sannav

    A path traversal vulnerability affects the The Zone Alias Import flow feature in Brocade SANnav before 3.0.0a. A local authenticated attacker can write an uploaded content outside the intended directory.

  4. CVE-2026-5048 8.0 Élevée

    Brocade SANnav · Broadcom brocade sannav

    In Brocade SANnav before 3.0.0a, an SQL Injection vulnerability in various external API inventories have a vulnerability that allows an authenticated attacker to inject malicious data into some of the REST API -query parameters.

  5. CVE-2026-5047 5.7 Moyenne

    Brocade SANnav · Broadcom brocade sannav

    A vulnerability in Brocade SANnav before 2.4.0b and 3.0.0 prints encoded passwords and  authentication tokens in log files. The vulnerability could allow an authenticated attacker with access to the log file including the SANnav supportsave to access the passwords.