Skip to content
CVE PROGRAM SOURCE RECORD8.7 High

CVE-2026-82368

Insecure access controls on internal service ports in Brocade SANnav versions before 3.0.1a allow local, non-administrative host users to communicate directly with backend manageme

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
brocade

Description

Insecure access controls on internal service ports in Brocade SANnav versions before 3.0.1a allow local, non-administrative host users to communicate directly with backend management services. A local attacker can leverage this exposed access to transmit commands to connected Fabric OS switches under the security context of the SANnav management user.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Brocade SANnav

Default version status: unaffected

  • 0 to < 3.0.1aaffected

References