Product by Brocade
Brocade Sannav
48 known vulnerabilities in Brocade Sannav (Brocade), 0 of them actively exploited (CISA KEV).
Key figures
48
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
3
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2026-82370 | Unauthenticated remote command injection in the Brocade SANnav orchestrator HTTP service | — | |
| High | CVE-2026-82369 | Insufficient input sanitization of shell metacharacters in Brocade SANnav before 3.0.1a | — | |
| High | CVE-2026-82368 | Brocade SANnav: Improper Access Control | — | |
| High | CVE-2026-82372 | Brocade SANnav: Insertion of Sensitive Information into Log File | — | |
| High | CVE-2026-5047 | Brocade SANnav: Insecure Storage of Sensitive Information | 5.7 | |
| High | CVE-2026-5048 | Brocade SANnav: SQL Injection | 8.0 | |
| High | CVE-2026-82371 | Plaintext exposure of sensitive authentication data in SANnav discovery service log files | — | |
| High | CVE-2026-14443 | Incomplete log sanitization during bulk IPsec policy collection in Brocade SANnav before 3.0.1a | — | |
| High | CVE-2024-29961 | supply-chain attack risk | 8.2 | |
| Medium | CVE-2026-14441 | Logic flaw in SANnav Java cache key handling object comparison handling | — | |
| High | CVE-2024-2859 | By default, SANnav OVA is shipped with root user login enabled (CVE-2024-2859) | 6.8 | |
| High | CVE-2024-2240 | Brocade SANnav: Execution with Unnecessary Privileges | 7.2 | |
| Medium | CVE-2026-5049 | Brocade SANnav: Path Traversal | 5.7 | |
| Medium | CVE-2026-14442 | Information exposure vulnerability in the job scheduling component of SANnav before 3.0.1a | — | |
| Critical | CVE-2024-29966 | hard-coded credentials in the documentation that appear as the appliance root password | 7.5 | |
| Critical | CVE-2024-4173 | Brocade SANnav: Exposure of Sensitive Information to an Unauthorized Actor | 7.6 | |
| High | CVE-2024-29959 | Brocade Fabric OS switch encrypted passwords in the Brocade SANnav Standby node's support save | 8.6 | |
| High | CVE-2024-4161 | Syslog traffic sent in clear-text | 8.6 | |
| Critical | CVE-2024-4282 | Weak TLS Ciphers on Brocade SANnav OVA SSH port 22 | 9.8 | |
| High | CVE-2025-12772 | Plaintext Switch admin login password is seen in Brocade SANnav support save | 4.9 | |
| Medium | CVE-2026-5769 | Brocade SANnav: Cleartext Storage in a File or on Disk | 4.1 | |
| High | CVE-2025-12773 | Brocade SANnav: Generation of Error Message Containing Sensitive Information | 6.5 | |
| High | CVE-2024-29968 | SQL Table names, column names, and SQL queries are collected in DR standby Supportsave | 7.7 | |
| High | CVE-2025-12774 | SQL queries with sensitive information printed in logs with Brocade SANnav before 3.0 | 7.5 | |
| High | CVE-2025-1053 | Brocade SANnav encryption key is logged in the debug logs | 4.9 |