CVE-2026-5048

In Brocade SANnav before 3.0.0a, an SQL Injection vulnerability in various external API inventories have a vulnerability that allows an authenticated attacker to inject malicious data into some of the REST API -query parameters.

Score

CVSS 3.1 8.0 High

Status

Analyzed - sirt@brocade.com

Published

2026-10-08

Last modified

2026-10-14

Weaknesses

CWE-89

Affected products

• Brocade Sannav (Broadcom)
• Brocade Sannav (Brocade)

References

• https://support.broadcom.com/external/content/SecurityAdvisories/0/37932