PT-2026-97615 · Brocade · Sannav
CVE-2026-82370
·
Published
2026-09-23
·
Updated
2026-09-25
CVSS v4.0
8.6
High
| Vector | AV:A/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N |
Name of the Vulnerable Software and Affected Versions
Brocade SANnav versions prior to 3.0.1a
Description
Unauthenticated remote command injection in the orchestrator HTTP service allows network-adjacent attackers to execute arbitrary administrative switch CLI commands and issue container management instructions. This can lead to the alteration of Fibre Channel fabric switch configurations or the manipulation of application container runtimes.
Recommendations
Update Brocade SANnav to version 3.0.1a or later.
Fix
Command Injection
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Sannav