Sensitive Data Exposure in Brocade SANnav by Broadcom

CVE-2026-5769

What is CVE-2026-5769?

A vulnerability in Brocade SANnav prior to version 3.0.1 allows for the potential capture of the admin password in plaintext due to an Out Of Memory (OOM) condition. When this occurs, the server hosting the SANnav Virtual Machine (VM) may create a memory swap file that contains sensitive credentials. An authenticated admin user with access to the server could exploit this scenario to view the memory dump, leading to unauthorized access to critical system controls.

References