CVE-2026-5047

A vulnerability in Brocade SANnav before 2.4.0b and 3.0.0 prints encoded passwords and  authentication tokens in log files. The vulnerability could allow an authenticated attacker with access to the log file including the SANnav supportsave to access the passwords.

Score

CVSS 4.0 8.2 High

Status

Analyzed - sirt@brocade.com

Published

2026-10-08

Last modified

2026-10-14

Weaknesses

CWE-922

Affected products

• Brocade Sannav (Broadcom)
• Brocade Sannav (Brocade)

References

• https://support.broadcom.com/external/content/SecurityAdvisories/0/37933