SQL Injection Vulnerability in Brocade SANnav by Broadcom
CVE-2026-5048

6.1MEDIUM

Key Information:

Vendor

Brocade
Status
Brocade Sannav
Vendor
CVE Published:
8 October 2026

What is CVE-2026-5048?

In Brocade SANnav versions prior to 3.0.0a, a significant SQL Injection vulnerability exists in various external API inventories. This flaw allows an authenticated attacker to inject malicious data into the REST API query parameters, potentially leading to unauthorized data manipulation and access. Users are strongly encouraged to update to the latest version to mitigate this risk.

Affected Version(s)

Brocade SANnav 0 < 3.0.0a

References

https://support.broadcom.com/external/content/SecurityAdv...

CVSS V4

Score:
6.1
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.