CVE-2026-5769: Brocade SANnav 0 to before 3.0.1

Affected technology

Brocade SANnav · 0 to before 3.0.1
Brocade

Description’s affected range: before 3.0.1 can have the Brocade Fabric OS switch admin password captured in plaintext within a memory swap file on the server hosting the Brocade SANnav Virtual Machine (VM)

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 4.0): Local · High privileges required · No user interaction required

What an attacker can do

An authenticated admin user with access to the server hosting the SANnav could potentially view the memory swap file and access the password(s). Vendor/CNA’s CVSS 4.0 assessment (base score 5.6/10) rates confidentiality impact as high; integrity and availability impact as none.