CVE-2026-5047

A vulnerability in Brocade SANnav before 2.4.0b and 3.0.0 prints encoded passwords and  authentication tokens in log files. The vulnerability could allow an authenticated attacker with access to the log file including the SANnav supportsave to access the passwords.

CVSS 4.0

8.2CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N

CVSS 3.1

5.7CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS

0.2% chance of exploitation in the next 30 days; higher than 9% of CVEs (scores of 2026-10-25)

CWE

CWE-922

Published

2026-10-08

Modified

2026-10-14

Record from

the NVD, synced 2026-10-19

Affected

• broadcom:brocade_sannav

References

• https://support.broadcom.com/external/content/SecurityAdvisories/0/37933

Check your stackJSON