CVE-2026-5049

A path traversal vulnerability affects the The Zone Alias Import flow feature in Brocade SANnav before 3.0.0a. A local authenticated attacker can write an uploaded content outside the intended directory.

Score

CVSS 4.0 6.9 Medium

Status

Analyzed - sirt@brocade.com

Published

2026-10-08

Last modified

2026-10-14

Weaknesses

CWE-22

Affected products

• Brocade Sannav (Broadcom)
• Brocade Sannav (Brocade)

References

• https://support.broadcom.com/external/content/SecurityAdvisories/0/37931